Dutch intelligence agencies have issued a stark warning regarding Russian state-backed hacking operations targeting internet-connected security cameras across Europe and Ukraine. The **Netherlands' General Intelligence and Security Service (AIVD)** and the **Military Intelligence and Security Service (MIVD)** revealed in a joint advisory that at least one Russian intelligence service is conducting extensive cyber-espionage. ### Espionage for Military Advantage The primary objective of these campaigns is to collect military intelligence. This includes tracking activity on key military transport routes and monitoring weapons shipments destined for Ukraine. More disturbingly, in Ukraine itself, compromised cameras have been used to locate Ukrainian military personnel, with this intelligence reportedly supporting lethal targeting efforts against soldiers and equipment. The advisory highlighted that a small number of compromised cameras were also identified along military logistics routes within the Netherlands. The agencies underscore the Netherlands' critical role as a transit country, making it a significant espionage target due to its geographic location and its unwavering support for Ukraine. ### Exploiting Weaknesses and Automating Analysis Attackers are scanning the internet for exposed devices, identifying **IP cameras** based on manufacturer information, and exploiting common security vulnerabilities. These include the use of default passwords, outdated firmware, and default configurations. Once compromised, the hackers leverage image-recognition software to automatically analyze video feeds, identifying military vehicles and their cargo. ### Broader Intelligence Gathering Beyond Ukraine The Dutch intelligence services assess that Russia's use of these cameras extends beyond the immediate conflict in Ukraine. They believe Russia is also gathering militarily relevant intelligence within **NATO** and **EU** countries, even when unrelated to Ukrainian support. While direct military attacks outside Ukraine using this information have not been observed, the campaign "demonstrates Russia's ability to collect operational intelligence that could be used in a future conflict." ### Bolstering Defenses The advisory emphasizes that the number of cyber espionage operations by Russian state actors in support of military operations has steadily increased since the war in Ukraine began. To counter this threat, organizations operating internet-connected cameras are urged to strengthen their security posture by: * Changing default credentials. * Keeping firmware up to date. * Regularly reviewing device configurations. * Considering the camera's country of origin, noting that countries like **China**, **Russia**, and **Iran** actively conduct offensive cyber programs targeting Dutch interests.