Russia Taps Cameras For NATO Arms

A security camera on the side of a warehouse is usually the dullest piece of kit in the place. It watches a loading bay, a gate, perhaps a strip of road where delivery vans pull in and out. The owner bought it to stop theft, check arrivals, or keep an eye on stock after hours.

But if that road is part of the route carrying military equipment towards Ukraine, the camera may be useful to someone else entirely.

Dutch intelligence services AIVD and MIVD said this month that at least one Russian intelligence service had compromised internet-connected cameras across Europe to watch military logistics. The feeds were used to identify military vehicles, cargo, transport routes, weapons deliveries to Ukraine, and locations of Ukrainian military personnel (AIVD). In the Netherlands, a small number of cameras placed directly on military logistics routes were confirmed as compromised, and their owners were warned (NL Times).

A burglar who borrows your windows

The technique is not especially sophisticated. Attackers scan the open internet for devices that should never have been visible there in the first place: cameras still using factory passwords, cameras running old software, or cameras left open to remote access the owner never properly set up. Once inside, the intruder does not need to add much. The camera is already doing the work, pointing at the world and streaming video (AIVD advisory PDF, Security Management).

It is the burglar who never enters the house, but uses every badly secured window on the street as a lookout. A single camera shows very little: a road, a rail siding, the entrance to a port. Put enough of those views together and a pattern appears. When a convoy passed, which way it travelled, how often it moved, what type of vehicles were involved (Intelnews). In a war where logistics matter as much as firepower, that timing is intelligence.

The advantage over satellite imagery is closeness. A roadside camera can catch details that orbiting sensors may miss: markings on vehicles, escort arrangements, loading activity. The Dutch advisory refers to automated image recognition, meaning software that can scan footage for vehicle shapes, markings or repeated movement so people do not have to sit watching every feed. That makes the operation scalable across dozens or hundreds of compromised cameras.

The weak-device pattern is spreading

The Netherlands is not the whole story. Finland issued a similar warning days later, though there the concern is routers and enterprise network equipment rather than cameras. Finnish intelligence warned companies that actors linked to Russia's FSB exploit poorly protected network devices to reach companies, critical infrastructure and the defence industry (Supo, Kyberturvallisuuskeskus). The lever is the same: cheap, weakly secured equipment becomes the way in. Finland, now a NATO member with a 1,340-kilometre border with Russia, is treating connected devices as part of national resilience.

Poland matters for a more direct reason. Much of the military supply chain for Ukraine crosses Polish territory. Allied governments had already warned that Russian military hackers were targeting logistics firms involved in support for Ukraine (NCSC, Kresy). German media also picked up the story, although the current public evidence runs through Dutch sources rather than a separate German intelligence finding (Focus).

That distinction matters. Much of the coverage has spoken about "hacked doorbell cameras" along NATO routes. The official Dutch documents refer to IP cameras. Doorbells, specific brands and detailed route maps appear in media versions of the story, not in the published advisory (AIVD advisory PDF). The confirmed facts are serious enough without dressing them up.

Who fixes this?

The Dutch advice to device owners is practical: change default passwords, turn off remote access where it is not needed, update the camera's software, use encrypted connections, and limit what the camera can see. Even a well-secured camera creates risk if it has a clear view of a sensitive military loading area and is later compromised (AIVD advisory PDF).

But this cannot be left to individual owners. A homeowner or warehouse manager can fix a password. They cannot map which civilian cameras overlook sensitive corridors, identify the owners, set procurement standards, or co-ordinate what should and should not be visible along logistics routes. That is work only states can do. Dutch services did it for the cameras they found. Whether other NATO members are doing the same remains unclear.

Europe's military supply chain does not move through a separate military world. It runs along commercial roads, through civilian ports, past private warehouses and across streets lined with cheap connected sensors. That gives NATO depth and flexibility. It also makes the system visible, one forgotten default password at a time.