Russian intelligence agencies have been accused of hacking internet-connected IP cameras across several NATO countries and Ukraine to secretly monitor military logistics and the movement of aid. According to a joint advisory released by Dutch intelligence and international security partners, the campaign focused on watching transportation routes used to deliver military equipment to Ukraine. Officials said the operation was part of a wider cyber espionage effort aimed at collecting real-time information without being physically present.
Investigators found that the attackers gained access to internet-connected cameras installed near roads, railway lines, border crossings, ports and other important locations. These cameras were often used by businesses, public authorities and private owners for normal security purposes. Once compromised, they allowed the hackers to observe the movement of military convoys and supply vehicles, helping them gather valuable intelligence on logistics operations.
Security agencies believe the campaign was carried out by a Russian intelligence service that has repeatedly targeted Western governments and organizations. The attackers reportedly relied on weak passwords, outdated software and exposed online devices to break into the cameras. In many cases, they did not need advanced hacking techniques because basic security mistakes made the systems easy to access.
The advisory also revealed that the hackers did more than just watch live camera feeds. In some cases, they attempted to collect login details, network information and other technical data that could help them expand their access. This allowed them to better understand the networks connected to the cameras and potentially compromise additional systems linked to the same organizations.
Cybersecurity researchers noted that thousands of internet-facing cameras remain vulnerable because they still use factory-default passwords or have not received important security updates. Internet scanning data highlighted a large number of devices running services known to have security weaknesses. These exposed systems provide attractive targets for attackers looking to conduct surveillance or intelligence gathering.
The intelligence advisory warned that this activity is part of a broader pattern of Russian cyber operations linked to the war in Ukraine. Instead of attacking military systems directly, intelligence agencies are increasingly targeting civilian technology that can reveal useful information. Everyday devices connected to the internet can become valuable intelligence tools when they are left unsecured.
Officials urged organizations that operate IP cameras and other internet-connected devices to improve their security immediately. They recommended changing default passwords, enabling multi-factor authentication where available, installing the latest firmware updates and limiting remote access. Regular monitoring of connected devices can also help detect suspicious activity before attackers gain long-term access.
The investigation highlights how modern cyber espionage is increasingly focused on collecting information through ordinary connected devices instead of launching highly visible attacks. Intelligence agencies stressed that protecting internet-connected equipment is now an important part of national security. As military support for Ukraine continues, governments and organizations are being urged to strengthen cyber defenses to prevent similar surveillance campaigns in the future.
Stay alert, and keep your security measures updated!
Source: Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news
