CERT-UA and SSSCIP issued an alert regarding unauthorized remote access to Dahua video systems, highlighting risks from predictable device serial numbers and older authentication bypass flaws.
How were devices accessed?
A key entry point for the perpetrators was an online platform that allows users to remotely monitor their cameras from a mobile phone or computer. The serial numbers of these devices have a predictable structure, which allowed unknown parties to guess them en masse and determine which cameras are connected to the system.
Attackers also exploited weak passwords or older versions of software that contained known security issues, thereby bypassing authentication barriers.
Signs of violation
Authorities have urged users to check their devices for suspicious signs, including the appearance of unknown accounts, unauthorized changes to settings, and activity logs indicating connection via the remote monitoring service.
READ ALSO
Hospital patient records accidentally uploaded to artificial intelligence platforms
To protect systems, it is recommended to disable this specific remote connection feature if it is not necessary, avoid directly connecting devices to the internet, and install the latest software updates.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
end of article
Top comments (0)