Hunt.io uncovered Operation CameraSwarm, a campaign that compromised more than 14,530 Dahua devices by combining credential attacks, CVE-2021-33044, CVE-2021-33045, and a P2P relay method. The recovered tooling and logs suggested concentrated activity in Ukraine and Russia, while defenders are urged to update firmware, disable unnecessary P2P access, and review Easy4IP exposure. #Dahua #OperationCameraSwarm #CVE-2021-33044 #CVE-2021-33045 #Easy4IP #ITRESLabs #Huntio
Keypoints
- Hunt.io linked the campaign to more than 14,530 Dahua device compromises.
- The operation used credential attacks, two authentication-bypass flaws, and P2P relay abuse.
- CVE-2021-33044 and CVE-2021-33045 were used to reach 1,923 cameras with a persistent account.
- 283 devices were accessed through the Dahua P2P path, including systems behind NAT.
- Defenders should apply firmware fixes, disable P2P if unused, and secure Easy4IP-connected systems.
Read More: https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html