Search: “p2p”

7 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 135 Vulnerability 54 Phishing & fraud 26 Ransomware 26 Exploit / PoC 22 Threat actor 18 Industry 15 Data breach 10 Policy & legal 7 Research 4 Advisory 3 Tools 1 AI safety & security 1 AI research 1

SeverityAll critical 77 high 122 medium 85 low 33 info 8

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Hunt.io disclosed Operation CameraSwarm, compromising 14,500+ Dahua cameras via credential attacks, auth bypass CVEs, and P2P relay techniques across Ukraine and Russia.

Hunt.io reconstructed a campaign codenamed Operation CameraSwarm that compromised over 14,530 Dahua devices between June 17 and July 22, 2026. Attack paths included credential attacks against 12,324 IPs, exploitation of CVE-2021-33044 and CVE-2021-33045 affecting 1,923 cameras, and P2P relay access to 283 devices behind NAT. The operator, assessed as Russian-speaking, left behind 2,616 files including tooling and campaign logs, with confirmed compromises concentrated in Ukraine and Russia. Dahua advises factory resets and firmware updates; both 2021 CVEs remain in CISA's KEV catalog.

The Hacker NewsAug 25, 15:59 UTC · 22d agoThreat actor in the wildCVE-2021-33044 CVE-2021-33045 CVE-2024-39943+1 CVEs1

ExfilSquad Targets New Victims, Shares Data via Torrents

Extortion group ExfilSquad lists 13 new US, UK and Swedish victims and now distributes stolen data via peer-to-peer torrents.

ExfilSquad, a data-theft extortion collective that emerged in mid-2026, announced 13 new victims in the US, UK and Sweden with an August 5, 2026 negotiation deadline. The group skips ransomware, instead stealing data and threatening publication on a dark web leak site. Resecurity says its TTPs center on exploiting misconfigured Microsoft Dataverse, Power Pages, case management and CRM portals. The group now distributes stolen data through per-victim torrent trackers and web seeds, making leaks hard to contain.

Security AffairsAug 11, 16:45 UTC · Aug 11, 2026Threat actor in the wild

Cybercriminals Hijacking Vulnerable SSH Servers in New Proxyjacking Campaign

The Hacker NewsJul 1, 05:48 UTC · Jul 1, 2023Threat actor

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

One actor compromised over 14,000 Dahua cameras in Ukraine and Russia using brute-force, authentication bypass, and cloud relay serial-number abuse.

Hunt.io reconstructed Operation CameraSwarm from an exposed operator directory, revealing one actor compromised 14,000+ Dahua cameras between June 17 and July 22, 2026, mainly in Ukraine and Russia. The toolkit included a brute-force engine, a two-flaw 2021 authentication-bypass chain planting a persistent backdoor account on 1,923 cameras, and abuse of Dahua's cloud relay where 89.4% of probed serials returned open, unauthenticated channels. A SalatStealer Windows binary and Defender-disabling PowerShell script were staged on the same server but appear unrelated to the camera campaign.

Security AffairsAug 19, 17:37 UTC · 28d agoThreat actor in the wildCVE-2024-39943 CVE-2025-31702

Search: “p2p”

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

ExfilSquad Targets New Victims, Shares Data via Torrents

Cybercriminals Hijacking Vulnerable SSH Servers in New Proxyjacking Campaign

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

How bad actors are utilizing the InterPlanetary File Systems (IPFS)

Phishing Campaigns Use SVB Collapse to Harvest Crypto

Anatomy of Cybercriminal Communications: Why do crooks prefer Skype