Russian hackers hack IP cameras in NATO countries to track weapons shipments to Ukraine

The Dutch General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD) issued a joint statement indicating that Russian state-sponsored hackers are conducting large-scale attacks on civilian IP cameras positioned along logistical routes in Europe. The operation aims to identify what type of weapons are being sent to Ukraine.

The investigation found that a small number of cameras in the Netherlands were hacked, specifically those located near military logistics routes. Owners of the affected cameras have been notified and are taking appropriate security measures. Intelligence agencies emphasize that the Netherlands is a particularly important target for Russian spies due to its role as a transit country and its active military support for Ukraine.

Most of the hacked IP cameras were vulnerable: they used default passwords, outdated software, and factory settings. Often these are cheap Chinese cameras from Hikvision or Dahua, including smart doorbells installed by citizens for home or business security. The camera owners are usually unaware that their devices have been compromised.

Previous reports indicate that Russian hackers have been conducting widespread cyberattacks since 2022 against logistics and technology companies involved in delivering international aid to Ukraine. In 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) reported that at least 13 NATO member states and Ukraine have been victims of such attacks.

Ukrainian hackers have previously hijacked Russian surveillance cameras to track Russian troop movements and adjust long-range strikes. This method was successfully used during the first use of a sea drone to strike a Russian submarine in the port of Novorossiysk.

Israeli security services have previously warned that Iran used IP cameras to find targets during massive drone and missile attacks on Israel. Conversely, Israeli intelligence and the CIA managed to infiltrate Tehran's security and traffic camera network, allowing them to locate former Iranian Supreme Leader Ali Khamenei before airstrikes that killed him on the first day of the war.