TEL AVIV\u00a0\u2014\u00a0The role of Israel\u2019s hijacking of Iran\u2019s street cameras in the killing of the country\u2019s supreme leader underscores how surveillance systems are increasingly being targeted by adversaries in wartime.<\/p>\n
Hundreds of millions of cameras have been installed above shops, in homes and on street corners across the world, many connected to the internet and poorly secured. Recent advances in artificial intelligence have enabled militaries and intelligence agencies to sift through vast amounts of surveillance footage and identify targets.<\/p>\n
On Feb. 28, Israel vividly demonstrated the potential of such systems to be hacked and used against adversaries when Israel tracked down Iranian leader Ayatollah Ali Khamenei with the help of Tehran\u2019s own street cameras,( despite repeated warnings that Iran\u2019s surveillance systems had been compromised, according to interviews and an Associated Press review of leaked data, public statements and news reports. <\/p>\n
The use of hacked surveillance cameras among other intelligence in the operation to kill Khamenei was described to the AP by an intelligence official with knowledge of the operation and another person who was briefed on the operation. Neither was authorized to speak with the media and both shared information on condition of anonymity. <\/p>\n
Iran has installed tens of thousands of cameras in its capital in response to waves of protests, most recently in January, when massive nationwide demonstrations ended in a bloody crackdown that killed many thousands of Iranians.<\/p>\n
That Tehran\u2019s cameras were compromised was no secret: the city\u2019s cameras were repeatedly hacked starting in 2021, and last year, a senior Iranian politician warned publicly that cameras had been compromised by Israel, posing a national security threat.<\/p>\n
Conor Healy, director of research at surveillance research publication IPVM, said Khamenei\u2019s killing illustrates a pressing security dilemma for governments seeking to quash dissent. <\/p>\n
\u201cThe irony is that the infrastructure authoritarian states build to make their rule unassailable may be what makes their leaders most visible to the people trying to kill them,\u201d Healy said. \u201cDo you trust who is watching?\u201d<\/p>\n
Warning signs<\/p>\n
For years, cybersecurity experts have warned that cameras could be hacked for war.<\/p>\n
In 2019, security engineer Paul Marrapese discovered he could easily hack millions of cameras<\/a> from the comfort of his home office in California. <\/p>\n Despite speaking up repeatedly since, the number of unprotected cameras only continues to grow. A scan of unprotected camera feeds this year turned up nearly three million hits in almost every country in the world, Marrapese told AP, including nearly 2,000 cameras in Iran alone.<\/p>\n \u201cThere are millions and millions and millions of these throughout the world,\u201d Marrapese said. Many, he added, are trivially easy to hack: \u201cThey\u2019re just dumb little things. … It\u2019s fish in a barrel.\u201d<\/p>\n Companies have advertised cameras hooked up online, accessible with cellphones, with feeds easily diverted by hackers. Many are installed with minimal security by unsophisticated users who fail to set up passwords or install security patches. Securing cameras takes constant vigilance, but hacking them takes identifying just one exposed vulnerability, such as an outdated system or a generic password like \u201c1234.\u201d<\/p>\n Even surveillance systems set up by governments on networks sealed off from the internet are vulnerable: It takes just one insider turncoat to compromise such systems.<\/p>\n \u201cHumans are kind of the weakest link,\u201d Marrapese said. \u201cThere\u2019s really only so much you can do.\u201d<\/p>\n Eyal Hulata, Israel\u2019s former national security adviser and a senior fellow at the Foundation for the Defense of Democracies, said Israel is under constant cyberattacks from Iran but has so far been able to defend against it.<\/p>\n \u201cThere is high alert on all cyber fronts,\u201d he said. <\/p>\n For years, hacking cameras for war remained theoretical. But in 2023, Hamas hacked surveillance cameras in southern Israel ahead of its Oct. 7 attack, allowing the group to monitor Israeli army patrols and assisting the attack, according to Israeli media. That same year, a Ukrainian official told reporters that Russia attempted to hijack cameras near missile targets, a trend that continued in 2024 when Russians hacked cameras in Kyiv and last year, when they hacked cameras at border crossings. <\/p>\n Experts say advances in AI have allowed militaries to overcome a critical hurdle in weaponizing hacked footage: sifting through huge amounts of video to identify people, vehicles, and other targets, a task that once took teams of analysts weeks or months but can now be done in real time. With a simple keyword search, AI can scan feeds and return results almost immediately.<\/p>\n \u201cIt used to be that you could hack the cameras, but humans had to do the real work of figuring out where the person was,\u201d said cryptographer and security expert Bruce Schneier. \u201cWith AI systems … you can do a lot more automatically.\u201d<\/p>\n The despot\u2019s dilemma<\/p>\n Iran\u2019s cameras have been repeatedly hacked over the past few years. <\/p>\n In 2021, an Iranian exile group leaked footage of abuses at Tehran\u2019s notorious Evin prison. In 2022, another group claimed it hacked over 5,000 cameras around Tehran, dumping gigabytes of surveillance footage and internal data on a Telegram channel. <\/p>\n Then, during a 12-day war last summer, Israel used Tehran\u2019s cameras to track and bomb the location of a meeting of Iran\u2019s Supreme National Security Council, injuring Iranian President Masoud Pezeshkian, according to Iranian lawmakers and an Israeli documentary<\/a>. <\/p>\n \u201cAll the cameras at our intersections are in the hands of Israel,\u201d Mahmoud Nabavian, deputy chairman of the Iranian parliament\u2019s national security committee, told Iranian media in September<\/a>. \u201cEverything on the internet is in their hands … if we move, they will find out.\u201d <\/p>\n The vulnerabilities have come amid Iran\u2019s stepped-up use of surveillance cameras after a series of protests roiled the country. Subway cameras<\/a>, for example, are used to detect when women don\u2019t don the country\u2019s mandatory hijab, or headscarf, using facial recognition to identify violators.<\/p>\n But data collected to consolidate control creates a ripe target for hackers, said researcher Michael Caster, who investigated China\u2019s sales of surveillance technology to Iran.<\/p>\n \u201cMalicious parties can more easily gain access,\u201d Caster said.<\/p>\n Iran in particular, long sanctioned by the West, faces difficulties in getting up-to-date hardware and software, often relying on Chinese-manufactured electronics or older systems. Pirated versions of Windows and other software are common. That makes it easier for potential hackers to target the country.<\/p>\n The Financial Times earlier reported on the use of cameras in Khamenei\u2019s killing.<\/p>\n The person briefed on the operation who spoke to the AP said that for years almost all the traffic cameras in Tehran had been hacked and the information transferred to servers in Israel. At least one camera was at an angle that allowed Israel to track daily movements of people, such as where they parked their cars near Iran\u2019s leadership compound, the two people said.<\/p>\n Algorithms helped provide information including people\u2019s addresses, routes they took to work and who protected them, according to the person briefed on the operation. That same person said the attack had been planned for months, but the operation was expedited once it was determined that Khamenei and his top officials would be in the leadership compound that morning.<\/p>\n Israel\u2019s prime minister\u2019s office didn\u2019t respond to request for comment. <\/p>\n Col. Amit Assa, a former official with Israel\u2019s Shin Bet domestic security service, said that such operations are powered by many sources of intelligence, such as undercover agents and bugged conversations.<\/p>\n However, Assa says cameras play a key role because they allow intelligence officers to identify people, providing key confirmation in deciding on whether to strike.<\/p>\n When you see a person\u2019s face on a screen in the command center, it helps in making the decision to put your \u201cfinger on the yellow button, as we say,\u201d he said.<\/p>\n More cameras, more coverage<\/p>\n