Easy4IP

Reported Context (3)

The primary entry point is Easy4IP, a Dahua cloud service that lets users reach cameras remotely using the device’s serial number. Because those numbers follow a predictable pattern, hackers can guess them in bulk and Weekly Cyber Roundup Covers PHP2Shell Exploitation, Oracle Scanning and More
The primary initial access vector used in the attacks is via Easy4IP, a peer-to-peer (P2P) platform that allows users to remotely monitor homes or small businesses by connecting their Dahua IP cameras, NVRs, and DVRs CERT-UA Warns of Dahua Camera Access via P2P Serial-Number Guessing and Authentication Weaknesses
The recovered tooling and logs suggested concentrated activity in Ukraine and Russia, while defenders are urged to update firmware, disable unnecessary P2P access, and review Easy4IP exposure. Hunt.io Attributes 14,530 Dahua Device Compromises to Operation CameraSwarm

CVE (9)

Malware (3)

People (4)

Threat Actors (6)

MITRE ATT&CK (5)

Vendors (10)

Products (17)

Tools (4)

Industries (7)

Countries (22)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.