Indian government probes CCTV espionage operation linked to Pakistan

Summary

Indian authorities have reportedly ordered an audit of the nation’s CCTV cameras, after police uncovered what they claim was a Pakistan-backed surveillance operation. This story begins on March 14th, when police in Ghaziabad – a city adjacent to India’s capital Delhi – announced they had arrested suspects after finding CCTV cameras aimed at railway stations and other infrastructure. The solar-powered cameras streamed video over cellular networks – perhaps using accounts tied to stolen SIM cards – to viewers in Pakistan. Indian authorities investigated further and found multiple cameras in other locations, all located near important infrastructure. It’s alleged that Pakistan-backed operatives recruited Indian citizens to install the cameras. India and Pakistan fought a brief war last year, and tensions between the two nations have been high for decades. The two nuclear-armed nations accuse each other of sponsoring terrorism. The allegation that Pakistan found a way to install and operate cameras in India is therefore politically hot because it suggests Delhi’s defenses against its greatest foe may have holes. The incident also shows that Indian laws requiring registration of all SIM cards used to connect devices to cellular networks have their limits. Indian media now report that the nation’s Ministry of Home Affairs has ordered an audit of all CCTV cameras across the nation, to check operators have secured them properly. The need for such an audit suggests Indian authorities fear widespread compromise of CCTV cameras, a reasonable theory given the devices are notorious for running vulnerable versions of Linux and being co-opted into botnets like Mirai. After reports of the camera audit emerged, India’s government issued a statement reminding citizens that it has set standards for CCTV cameras sold, including checking for vulnerabilities that allow for unauthorized remote access. India has certified 507 cameras for sale within its borders, and government entities mus...