Russia hacked cameras near NATO bases to track arms shipments to Ukraine

A joint investigation has revealed that Kremlin-linked hackers gained access to internet cameras positioned along military transport routes, which were being used to gather information on weapons supplied to Ukraine. The operation targeted European NATO member states, with a particular focus on the Netherlands, as well as Ukraine itself.

Intelligence services disclosed that organizations with IP cameras along these routes had been alerted to take appropriate measures against what they described as a "large-scale Russian operation." The investigation identified video call systems and home surveillance cameras as particularly vulnerable. Hackers located these devices using public network scanning services and attempted to gain access, often finding that the cameras were inadequately protected, frequently using factory default passwords and outdated software.

"When an IP camera is detected, a malicious actor can try to log into it via the internet. This is often relatively easy because many internet-connected IP cameras are not sufficiently protected," stated the special services. The increasing popularity and affordability of internet-connected cameras, especially Chinese models, coupled with the expansion of high-speed internet, have made them more accessible but also more susceptible to cyber threats.

This method of intelligence gathering is considered simpler and cheaper than using drones or satellites. The report also noted that Italian authorities decided to expel two Russian embassy military attachés for their involvement in espionage activities. The findings underscore the ongoing cyber threats and espionage efforts targeting military supply lines and sensitive routes related to the conflict in Ukraine.

“

When an IP camera is detected, a malicious actor can try to log into it via the internet. This is often relatively easy because many internet-connected IP cameras are not sufficiently protected.