Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
CameraSwarm Hackers Compromise 14,500+ Dahua Cameras, Backdoor 1,900 Devices
Excerpt
A threat actor tracked as CameraSwarm compromised more than 14,530 Dahua IP cameras in just 35 days, using mass scanning, weak-password attacks, authentication bypasses, and cloud relay abuse. Investigators found that 1,923 of the affected devices received a persistent backdoor account, potentially allowing attackers to regain access even after an administrator changes the main password. The campaign ran between June 17 and July 22, 2026, and primarily targeted…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 154.86.119.60 | High | Score 58/100 | First seen |
| CVE | CVE-2021-33044 | High | Score 79/100 | First seen |
| CVE | CVE-2021-33045 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…