Dahua

Reported Context (2)

NetKlass Technology certificate valid from 2004 to 2014, MD5-signed with a 1024-bit key. 1.34.200.85 is a Dahua DH-XVR5116HS-I3 recorder. These are victim hosts repurposed as operational relays, selected on consistent Rapid7 Details BPFDoor and AVERAT Activity Targeting Network-Edge Appliances
Disclosure note: The relevant national CERTs were notified on 10 August 2026, and Dahua's PSIRT was notified regarding the issues that affect devices in all countries observed in this campaign. We appreciate Dahua Operation CameraSwarm Compromised More Than 14,500 Dahua Cameras, Hunt.io Finds

CVE (4)

Malware (5)

MITRE ATT&CK (37)

Vendors (3)

Products (5)

Tools (9)

Industries (2)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.