Pro-Russian groups exploit French cameras

According to ZATAZ, pro-Russian groups have been using images from French security cameras, with approximately fifty cases documented. These cameras, typically used to protect businesses like warehouses, supermarkets, and salons, have reportedly been turned into tools for surveillance.

Groups target industrial and public systems

ZATAZ reports that pro-Russian hacktivist groups have increased their attacks on French organizations, including actions against industrial systems and distributed denial-of-service (DDoS) attacks. Some groups, like NoName057(16), have shared videos showing events they describe as riots.

Attackers claim widespread camera control

While attackers claim to control thousands of cameras, ZATAZ notes that only fifty documented cases have been confirmed. The attackers’ claims of a widespread presence are not supported by verified evidence, and they also mention monitoring hotels, medical facilities, and schools, though these are not confirmed compromises.

Surveillance risks extend beyond images

The images from compromised cameras can reveal more than just visual data. They may expose employee habits, premises configurations, and even access to computer networks. This information could be used for reconnaissance or fraud, as seen in examples where individuals’ routines were exposed.

Control over cameras can lead to deeper breaches

If attackers gain administrative access, they can alter camera settings or stop recordings. This weakens the security of the physical space when it is most needed. Connected cameras are part of a larger system that includes software, accounts, and network communications, all of which need protection.

Preventive measures recommended by experts

Experts advise companies to inventory their cameras, recorder systems, and administrator accounts. Unused accounts should be deleted, and access should be limited to necessary needs. Strong, unique passwords and multi-factor authentication are also recommended for remote access.

Security protocols to reduce risks

Cybermalveillance.gouv.fr recommends changing default passwords, applying software updates, and limiting unnecessary communications between devices. Remote access should be handled through secure methods, and administration interfaces should not be directly exposed on the Internet. A separate network can help reduce the risk of moving deeper into internal systems.