Operation CameraSwarm

Campaign
3 incidents First seen 2026-08-19 Last seen 2026-10-27
Overview

Operation CameraSwarm appears in 3 incidents tracked by Vulpsec CTI; the most recent is: Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses. Targeted sectors: manufacturing.

Investigate in CTI Graph Login required Open in Dashboard
Threat ecosystem
Actors Malware Campaigns CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 130
Activity by month (incidents)
2026-082026-10
Sectors targeted
manufacturing · 1
Countries targeted
AM · 2AZ · 2BY · 2ES · 2KG · 2KZ · 2MD · 2RU · 2TJ · 2TM · 2UA · 2UZ · 2
Origin
RU · 1UA · 1
Kinds of incident
Exploited Vulnerability · 2Cyberattack (general) · 1Malware & Botnets · 1Vulnerability Disclosure · 1
Techniques seen in incidents
Botnet · 1Espionage · 1Exfiltration · 1T1059.001 - PowerShell · 1T1059.006 - Python · 1T1584.004 - Server · 1T1584.005 - Botnet · 1T1584.006 - Web Services · 1T1588.001 - Malware · 1T1588.005 - Exploits · 1T1588.006 - Vulnerabilities · 1
Related CVEs
CVE-2021-33044 · 3CVE-2021-33045 · 3CVE-2024-39943 · 1CVE-2024-53375 · 1CVE-2024-57049 · 1CVE-2025-31702 · 1CVE-2026-39987 · 1
Incident timeline
2026-10-27
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Hacker News
2026-09-15
AlienVault OTX The Hacker News Infosecurity-Magazine AlienVault OTX
2026-08-19
BleepingComputer Security Affairs