FBI Warns of HiatusRAT Malware Targeting Webcams and DVRs

The FBI PIN warns that HiatusRAT campaigns have actively targeted Chinese-branded webcams and DVRs since 2022, conducting large-scale scanning and exploitation (using tools like Ingram and Medusa) to brute-force telnet or exploit unpatched CVEs across devices (Hikvision, D-Link, Xiongmai) in the US, Canada, UK, Australia, and New Zealand; the notice lists targeted TCP ports, known CVEs, and recommends isolating vulnerable devices, applying patches, enforcing strong passwords and MFA, and monitoring networks.