Russian hackers have been accused of compromising internet connected cameras across Europe to monitor NATO military facilities and track the movement of equipment destined for Ukraine, according to findings released by Dutch intelligence agencies. The General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD) said the cyber operation targeted civilian cameras positioned along military transport routes in several European countries, including the Netherlands and Ukraine. The agencies described the activity as a large scale intelligence gathering campaign aimed at identifying the type of military equipment being transferred to Kyiv.
According to the joint investigation, the operation focused on internet protocol, or IP, cameras that are commonly used by businesses and homeowners for surveillance and remote monitoring. The intelligence services said organizations with cameras located near military transport routes have already been warned and advised to strengthen their security measures. Investigators found that many of the compromised devices had weak security configurations, including default passwords, outdated firmware, and standard settings that made unauthorized access easier. The agencies noted that attackers can identify vulnerable devices using widely available scanning tools and then attempt to gain access through the internet. The findings highlight growing concerns over the security of connected devices as they become increasingly common in homes, offices, and public spaces.
The use of surveillance cameras for intelligence gathering has become a recurring feature of modern conflicts. Dutch authorities said that once hackers gain access to these devices, they can observe troop movements, monitor logistics operations, and collect information without the knowledge of the camera owners. Similar tactics have been employed by multiple actors in recent years. Ukrainian cyber groups have previously accessed Russian surveillance systems to track military movements and support long range strike operations. One such instance involved the use of compromised cameras during an attack on Russia’s Novorossiysk port, where intelligence gathered from surveillance systems reportedly helped monitor activity around strategic assets.
Security officials have also highlighted the broader use of compromised cameras in international conflicts. Israeli authorities previously warned that Iran had used private security cameras to identify targets for drone and missile attacks against Israel. Research published earlier this year indicated that hundreds of surveillance devices had been accessed during that campaign. In another widely reported case, Israeli intelligence services and CIA reportedly infiltrated security and traffic camera networks in Tehran to gather information on key locations and individuals before military operations were carried out. Security experts say that exploiting existing surveillance infrastructure has become a cost effective alternative to drones and satellite reconnaissance, as ground based cameras can provide detailed and continuous views of locations while remaining largely unnoticed by their owners. The latest findings from Dutch intelligence agencies serve as another reminder of the cybersecurity risks associated with internet connected devices and the role they can play in modern intelligence operations and geopolitical conflicts.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
