Russian intelligence services have systematically compromised internet-connected security cameras across NATO member states and Ukraine to monitor military logistics operations, according to a joint advisory from the AIVD and MIVD, the Netherlands' civilian and military intelligence agencies, published July 10.
The operation targets cameras deployed along military transport routes, weapons shipment corridors destined for Ukraine, and positions of Ukrainian forces. Attackers exploit weak credentials and unpatched vulnerabilities in IP camera systems to gain access, then leverage these feeds for real-time surveillance of NATO and Ukrainian military activity.
The specific Russian intelligence service responsible remains unnamed in the advisory, though the coordinated nature and scale of the campaign point to state-level operations. This represents a shift in Russian cyber tactics during the Ukraine conflict. Rather than destructive attacks on critical infrastructure or data theft operations, Moscow has pivoted toward persistent surveillance using readily available commercial equipment. IP cameras present an attractive target because they often operate on default or weak passwords, receive infrequent security updates, and sit outside traditional network perimeter defenses.
The advisory does not specify which NATO countries face the heaviest targeting, though the inclusion of the warning suggests Poland, the Baltics, and other nations hosting Ukrainian refugee processing centers or military aid distribution hubs face elevated risk. Organizations operating military or sensitive logistics infrastructure now confront a straightforward threat. Cameras positioned near weapons depots, transport facilities, or troop staging areas can reveal operational patterns, supply chain movements, and force disposition to adversaries in real time.
Defenders should immediately audit IP camera deployments for default credentials, apply available firmware updates, restrict camera access through network segmentation, and disable internet-facing management interfaces where possible. Organizations handling military logistics should treat camera security as a operational security priority rather than a routine IT maintenance task. The advisory confirms that Russia continues adapting its espionage methods to extract actionable intelligence while maintaining plausible