Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Hunt.io reconstructed Operation CameraSwarm, a campaign claiming compromise of over 14,530 Dahua cameras between June and July 2026 using credential attacks, two authentication-bypass CVEs (CVE-2021-33044 / CVE-2021-33045), and an Easy4IP P2P relay that can make devices reachable behind NAT; the report details recovered tooling and logs, vendor advisories and mitigations, and recommends firmware updates, disabling P2P where unnecessary, strong credentials, and segmentation.