⚠️ Region Alert: UAE/Middle East
Check Point Research has documented a surge in cyber operations targeting IP cameras across the Middle East, specifically in the UAE, Israel, and neighboring Gulf states. These activities, attributed to Iran-nexus threat actors, are strategically timed with regional conflicts to facilitate battle damage assessment (BDA) and target correction. By exploiting known vulnerabilities in Hikvision and Dahua devices, attackers gain visual access to physical locations to support kinetic military operations.
The research highlights the use of commercial VPNs and VPS infrastructure to scan for vulnerabilities such as CVE-2021-33044 and CVE-2017-7921. This trend underscores a shift where IoT devices are no longer just targets for botnets but are integral components of interstate conflict and intelligence gathering. Organizations using these devices are urged to apply available patches to mitigate risks of remote code execution and unauthorized access.
Top comments (0)