Iran's network of traffic cameras hit by cyberattack
Incident
Summary
Hide ▲
Show ▼
The Iranian traffic-camera network was reportedly hijacked and used to track Ayatollah Ali Khamenei before a deadly air strike, showing how connected surveillance infrastructure can support battlefield intelligence. The access reportedly helped operators follow his movements ahead of the February 28 attack. The event matters because it turns a civilian camera system into a wartime intelligence asset. It also signals the risk that exposed IP cameras can be repurposed for reconnaissance.
Related Happenings
UAE and Gulf cyberattack surge after Iran conflict escalation
Target Trend
First: 06.05.2026 08:30
Last: 06.05.2026 08:30
Sources 1
About this happening:
Cyberattack volume surged across the **UAE** and wider **Gulf** after military operations against **Iran** began, pushing daily breach attempts to **600,000 to 800,000** and raisi...
UAE and Gulf cyberattack surge after Iran conflict escalation
Target TrendAbout this happening: Cyberattack volume surged across the **UAE** and wider **Gulf** after military operations against **Iran** began, pushing daily breach attempts to **600,000 to 800,000** and raisi...
NCSC-UK joint advisory on covert botnets and proxy networks
Public Sector Action
First: 23.04.2026 15:28
Last: 23.04.2026 15:28
Sources 1
About this happening:
**NCSC-UK** and partner agencies issued a **joint advisory** warning that **China-nexus hackers** are using **hijacked consumer devices** as covert proxy networks to hide maliciou...
NCSC-UK joint advisory on covert botnets and proxy networks
Public Sector ActionAbout this happening: **NCSC-UK** and partner agencies issued a **joint advisory** warning that **China-nexus hackers** are using **hijacked consumer devices** as covert proxy networks to hide maliciou...
Internet-exposed Rockwell Automation/Allen-Bradley PLCs concentrated in the United States
Target Trend
First: 10.04.2026 18:52
Last: 10.04.2026 18:52
Sources 1
About this happening:
A measured exposure pattern shows **5,219** internet-facing **Rockwell Automation/Allen-Bradley** PLC hosts worldwide, expanding the attack surface for **industrial control** netw...
Internet-exposed Rockwell Automation/Allen-Bradley PLCs concentrated in the United States
Target TrendAbout this happening: A measured exposure pattern shows **5,219** internet-facing **Rockwell Automation/Allen-Bradley** PLC hosts worldwide, expanding the attack surface for **industrial control** netw...
Iranian-affiliated US CNI OT attack campaign
Campaign
First: 08.04.2026 11:15
Last: 08.04.2026 11:15
Sources 1
About this happening:
An **Iranian-affiliated** campaign is actively targeting **US critical national infrastructure providers**, creating **operational disruption** and **financial loss** across multi...
Iranian-affiliated US CNI OT attack campaign
CampaignAbout this happening: An **Iranian-affiliated** campaign is actively targeting **US critical national infrastructure providers**, creating **operational disruption** and **financial loss** across multi...
Iranian-linked PLC targeting campaign against U.S. critical infrastructure
Campaign
First: 07.04.2026 21:02
Last: 07.04.2026 21:02
Sources 1
About this happening:
Iranian-linked hackers are actively targeting **Internet-exposed Rockwell/Allen-Bradley PLCs** on **U.S. critical infrastructure** networks, increasing the risk of operational dis...
Iranian-linked PLC targeting campaign against U.S. critical infrastructure
CampaignAbout this happening: Iranian-linked hackers are actively targeting **Internet-exposed Rockwell/Allen-Bradley PLCs** on **U.S. critical infrastructure** networks, increasing the risk of operational dis...
Timeline
-
27.03.2026 16:42 1 articles · 2mo ago
Iran traffic cameras hijacked before strike
Exploitation ObservedIsrael and the United States reportedly hijacked Iran's network of traffic cameras to track Ayatollah Ali Khamenei before an air strike on February 28 killed him.
Show sources
- Wartime Usage of Compromised IP Cameras Highlight Their Danger — www.darkreading.com — 27.03.2026 16:42
-
27.03.2026 16:42 1 articles · 2mo ago
Iran widens IP camera scans across more countries
Campaign Scope UpdateFollowing the February 28 strike, Iran increased attempts to gain eyes in Israel, Qatar, Bahrain, Kuwait, the UAE, and Cyprus, while proxies widened scans for exposed IP cameras and industrial control systems such as SCADA and PLCs inside specific countries.
Show sources
- Wartime Usage of Compromised IP Cameras Highlight Their Danger — www.darkreading.com — 27.03.2026 16:42