Another Supply Chain Mystery: IP Cameras Ship With Malicious Software

An IP camera sold through Amazon was found to have a hidden iframe in its web management interface that linked to Brenz.pl, a domain tied to fake antivirus campaigns, suggesting the device's firmware or shipped software had been tampered with—potentially during retail packaging or via a compromised supply chain. The domain has been seized and sinkholed by the Polish CERT; the report highlights similar past firmware issues, broader IoT supply-chain risks, and the difficulty consumers and resellers have in detecting altered device software.