130/69 Friday, March 6, 2026
A recent report from Check Point Research has identified cyberattack attempts linked to Iranian-affiliated hacker groups targeting hundreds of IP cameras (CCTV systems) across Israel and several Middle Eastern countries, including Qatar, Bahrain, and the United Arab Emirates-regions with significant military activity. The campaign primarily focuses on compromising cameras from Hikvision and Dahua Technology. Attackers reportedly used VPN and VPS infrastructure to conceal their scanning activities while searching for exploitable vulnerabilities. Security experts believe the activity goes beyond ordinary cyber espionage and may be part of preparations to support potential military operations in the region.
The attack patterns reflect a tactic known as “digital reconnaissance,” which Iranian actors have previously used to gather intelligence before physical attacks. For example, in June 2025, hackers linked to Iranian intelligence reportedly accessed live CCTV feeds in Jerusalem to identify targets shortly before a missile attack occurred. In the current campaign, attackers are exploiting well-known vulnerabilities (CVEs) related to authentication bypass and command injection-issues for which security patches have already been released.
Cybersecurity experts are urging system administrators to immediately update CCTV firmware to the latest versions and avoid connecting cameras directly to the public internet. They also recommend isolating surveillance systems within dedicated networks to prevent unauthorized external access. Meanwhile, analysts from Unit 42 at Palo Alto Networks have noted emerging activity from Russian-linked hacker groups operating in the same region. This development could further complicate the regional cybersecurity landscape and increase the risk of coordinated cyber operations.
Source https://www.theregister.com/2026/03/04/iranian_hacking_attempts_ip_cameras/