Iran and Others Use Hacked Cameras for Espionage, WSJ Reports

State actors and hacker groups are exploiting vulnerabilities in surveillance cameras to gather intelligence for military purposes, with Israel, Iran, Russia, and Ukraine among the nations involved, according to a Wall Street Journal investigation. An estimated 1.2 billion internet-connected cameras are in use globally, many with inadequate security, allowing unauthorized access to their feeds.

In Israel, a poultry farmer discovered his security camera's language settings had been changed to Arabic during a military campaign against Iran earlier this year. The Israeli National Cyber Directorate confirmed the Chinese-made camera had been compromised and was positioned to observe Israeli security activities near the Lebanese border. This incident highlighted a recurring threat, as the Directorate had previously warned about compromised devices being used for intelligence gathering.

In June 2025, the Directorate alerted the public to the risks, and in December 2025, its director, Yossi Karadi, revealed that Iranian hackers had used parking and traffic cameras to track Israeli figures. He also noted access to a camera overlooking the Weizmann Institute of Science shortly before an Iranian missile strike. Karadi reiterated these warnings in March 2026, stating his services had blocked 50 attempts at significant network intrusions.

The use of compromised cameras is a two-way street. In March, the Financial Times reported that Israeli intelligence had infiltrated traffic cameras in Tehran to monitor Iranian officials, information allegedly used in planning military operations, including the one that killed Supreme Leader Ali Khamenei. Iran's Passive Defense Organization head, Gholamreza Jalali, accused Israel and the U.S. in November 2025 of using Tehran's surveillance cameras for intelligence.

Russia and Ukraine are also reportedly using compromised cameras for military surveillance, with Russia-linked actors targeting devices in Europe to monitor military movements. Weak passwords, outdated software, and direct internet exposure are common vulnerabilities. Israeli authorities recommend changing default passwords, installing security updates, enabling two-factor authentication, and monitoring for suspicious connections. Artificial intelligence further enhances the analysis of camera feeds for intelligence purposes.