Ethical Hacking News
Dutch intelligence agencies have warned that Russia is using hacked IP cameras to gather military intelligence on NATO member states and Ukraine, highlighting the need for increased security awareness among businesses and individuals regarding IoT devices. The advisory emphasizes the importance of securing IP cameras and other connected devices from hacking and exploitation.
Dutch intelligence agencies have warned that Russia has been using hacked IP cameras to gather military intelligence on NATO member states and Ukraine. The Russian state actor uses image recognition software to conduct targeted searches for military vehicles and cargo via IP cameras. IP camera surveillance serves a different purpose, including acquiring relevant military intelligence in EU and NATO member states. Key variables that make IP cameras vulnerable include what the camera can see and whether it's reachable from the public internet. Recommendations to secure IP cameras include positioning them correctly, masking sensitive zones, and disabling remote access when not necessary. The origin of the hardware itself is also a concern, with countries like China, Russia, and Iran cited as potential sources of compromised devices.
Dutch intelligence agencies have issued a joint advisory warning that Russia has been using hacked internet protocol (IP) cameras to gather military intelligence on NATO member states and Ukraine. The warning, published by the Netherlands' AIVD and MIVD civilian and military intelligence services respectively, confirmed that at least one Russian intelligence service is systematically compromising IP cameras across the Netherlands, other EU and NATO member states, and Ukraine.
The operation, which is ongoing, has escalated since Russia's full-scale invasion of Ukraine. The Dutch services have determined that the Russian state actor uses image recognition software to conduct targeted searches for military vehicles and cargo they are transporting through IP cameras. The information obtained by the Russian state actor via digital espionage operations targeting IP cameras provides insight into relevant military data, such as EU and NATO military transport routes and weapon deliveries to Ukraine.
The surveillance operation in EU and NATO member states serves a different but related purpose, according to the advisory. "Furthermore, the Dutch services have determined that the Russian service is using the access to IP cameras to acquire relevant military intelligence in EU and NATO member states, including information that is not directly relevant to the war in Ukraine," confirms the advisory.
The most important variables, according to the advisory, are what the camera can see and whether it's reachable from the public internet. On the first: cameras should be positioned for their actual purpose and should avoid covering logistics routes, loading docks, ports, or any area where military movements or weapons shipments pass. Sensitive zones within the field of view should be masked or blurred where possible, and GPS location data should be stripped from video streams.
On accessibility: live streams should not be publicly reachable unless there's an essential reason for it. Port forwarding and UPnP should be disabled. Remote access should go through a VPN rather than direct exposure. Default passwords should be changed immediately on installation, admin accounts should be kept separate from stream-viewing accounts, and MFA should be enabled wherever the device supports it.
The advisory also flags the origin of the hardware itself: China, Russia, and Iran are cited as countries actively running offensive cyber programs targeting Dutch and European interests, and buyers should factor that into procurement decisions.
Cybersecurity firm Censys counted more than 87,000 internet-connected cameras across EU and NATO countries and Ukraine running services matching known-exploited vulnerabilities. In the Netherlands alone, more than 45,000 cameras are reachable from the public internet.
This alert highlights the need for increased security awareness among businesses and individuals regarding IoT devices such as IP cameras and their potential vulnerability to hacking. Fixing this issue does not require new technology but rather adopting best practices in securing these types of devices from exploitation.
Related Information:
https://www.ethicalhackingnews.com/articles/Dutch-Intelligence-Warns-of-Russian-Use-of-Hacked-IP-Cameras-for-Military-Espionage-ehn.shtml
https://securityaffairs.com/195708/intelligence/dutch-intelligence-warns-russia-uses-hacked-ip-cameras-for-military-espionage.html
Published: Mon Jul 20 09:42:53 2026 by llama3.2 3B Q4_K_M
