TL;DR: Israel spent years hacking nearly all of Tehran's traffic cameras. They encrypted the footage and sent it to servers in Tel Aviv, where AI systems built "life patterns" of Ayatollah Khamenei's security team: their addresses, schedules, and who they protected. That intelligence enabled the February 28, 2026 assassination. Now Iran is retaliating by targeting IP cameras across the Gulf: UAE, Qatar, Bahrain, Kuwait, Lebanon, Cyprus. The cameras in your city? They're not just watching you. In the wrong hands, they become targeting systems.
Nearly All of Tehran's Traffic Cameras: Compromised for Years
According to the Financial Times and multiple sources who spoke to international media, Israeli intelligence hacked into Tehran's extensive traffic camera network years ago.[1][2]
The scale is staggering:
- Nearly all traffic cameras in Tehran had been compromised
- Footage was encrypted and transmitted in real-time to servers in Tel Aviv and southern Israel
- One camera was specifically angled to capture where Khamenei's security team parked their cars
- The operation ran for multiple years before the strike
This wasn't a one-time breach. This was a persistent, multi-year penetration of a nation's surveillance infrastructure, repurposed for military intelligence.
AI Built the Kill List
Raw camera footage is useless without analysis. That's where Unit 8200, the IDF's signals intelligence division, came in.[2][3][4]
The data was fed into AI algorithms that built what intelligence officials call a "pattern of life":
Bodyguard Profiles
Home addresses. Work schedules. Which senior officials each guard protected. All extracted from traffic camera footage.
Movement Mapping
Vehicle tracking. Route analysis. Timing patterns. The AI could predict where Khamenei would be and when.
Network Analysis
Billions of data points from cameras, phone signals, and movement patterns combined to map communication and influence structures.
Strike Authorization
When the moment came on February 28, Israel knew exactly where to hit. The cameras told them.
On the day of the strike, Israel and the US also disrupted cellular service on Tehran's Pasteur Street, where Khamenei was killed. Anyone trying to warn the bodyguards got busy signals.[2]
Iran's Counter-Offensive: Cameras Across the Gulf
Iran learned the lesson. If cameras can kill a supreme leader, cameras can help retaliate.
According to Check Point Research, Iranian threat actors began targeting IP cameras within hours of the assassination:[5][6]
- United Arab Emirates: Active targeting of surveillance cameras
- Qatar: IP camera exploitation attempts detected
- Bahrain: Scanning for vulnerable cameras
- Kuwait: Same pattern of reconnaissance
- Lebanon: Camera infrastructure probed
- Cyprus: European cameras targeted
The targeting specifically focused on Hikvision and Dahua cameras, Chinese manufacturers whose devices are deployed globally, including throughout the United States.[5][7]
Why Cameras? Battle Damage Assessment
Check Point Research explains that compromised cameras serve multiple military purposes:[5]
- Battle Damage Assessment (BDA): See the results of strikes in real-time
- Target Correction: Adjust future strikes based on camera intelligence
- Pre-Strike Reconnaissance: Map targets before hitting them
- Pattern-of-Life Analysis: Track high-value targets over time
This isn't new. According to Check Point, camera compromise was used during the 12-day conflict between Israel and Iran in June 2025.[5] February 2026 just made the stakes clear: cameras can identify a target precisely enough to authorize an assassination.
What This Means for Your City
The cameras on your street corner aren't fundamentally different from the ones in Tehran. The same vulnerabilities. The same manufacturers. The same network exposure.
Same Manufacturers
Hikvision and Dahua cameras are banned in some US federal applications but are everywhere in cities, schools, and private businesses.
Same Vulnerabilities
The exploits Iran used against Gulf state cameras exist for cameras everywhere. Default passwords. Unpatched firmware. Internet exposure.
Same Data Value
If cameras can build a kill profile on a supreme leader, they can track anyone. Activists. Journalists. Political opponents. You.
Same AI Potential
The pattern-of-life analysis that found Khamenei can be applied to anyone captured on camera, the same threat behind the spread of facial recognition vans. The technology doesn't discriminate.
The Dual-Use Reality
When cities install traffic cameras, they say it's for safety. When stores install cameras, they say it's for theft prevention. When buildings install cameras, they say it's for security.
All true. Also true:
- Those cameras can be hacked by foreign intelligence services
- Those cameras can feed AI systems that track individuals
- Those cameras can enable targeted strikes on anyone
- Those cameras are part of a global surveillance infrastructure that nation-states treat as a battlefield
Every camera is dual-use. Every camera is a potential military asset. The Israel-Iran operation just made that impossible to ignore.
The Hikvision and Dahua Problem
Both camera manufacturers targeted in the Iranian attacks are Chinese companies with documented security issues:[5][7]
- Hikvision: World's largest video surveillance manufacturer. Sanctioned by US in 2019 for human rights abuses in Xinjiang. Known critical vulnerabilities.
- Dahua: Second largest. Also sanctioned. Backdoor vulnerabilities discovered multiple times.
- Installed everywhere: Despite sanctions on federal use, these cameras remain deployed across American cities, businesses, and homes
The cameras watching Tehran were from these manufacturers. The cameras watching Tel Aviv too. The cameras watching your neighborhood? Check the logo.
What You Can Do
Complete camera avoidance is nearly impossible in urban areas. But you can reduce exposure:
Know Your Environment
Note camera locations on your regular routes. Understand where you're being recorded. Awareness is the first defense.
Vary Your Patterns
Pattern-of-life analysis needs patterns. Change routes. Alter schedules. Make the AI work harder. See our guide on how to beat facial recognition.
Secure Your Own Cameras
If you have cameras: unique passwords, firmware updates, isolated networks. Don't be someone else's intelligence source.
Support Camera Restrictions
Advocate for limits on public camera deployment. Question why every corner needs surveillance.
The Bigger Picture
The February 28 assassination wasn't just a military operation. It was a demonstration of what surveillance infrastructure enables.
Years of footage. AI analysis. Pattern recognition. Network mapping. Real-time positioning. Targeted strike.
Iran lost a supreme leader because Israel could watch Tehran through Tehran's own cameras.
Now Iran is building the same capability against Gulf states. Other nations are certainly watching and learning. The surveillance arms race isn't about who can install the most cameras anymore. It's about who can compromise and weaponize everyone else's.
The cameras in your city are not neutral infrastructure. They're assets in a global surveillance war. The only question is whose side they're on today.
References
- Times of Israel - Israel hacked Tehran traffic cameras to track Khamenei (March 2026)
- CNN - How the plot to kill Khamenei came together (March 2026)
- Jerusalem Post / Financial Times - Israel hacked Tehran's traffic cameras, used AI (March 2026)
- Calcalist Tech - Hacked Tehran traffic cameras fed Israeli intelligence (March 2026)
- Check Point Research - Iranian Targeting of IP Cameras (March 2026)
- Security Affairs - Iran-linked hackers target IP cameras across Israel and Gulf states (March 2026)
- The Register - Hundreds of Iranian hacking attempts hit IP cameras (March 2026)
Published: March 17, 2026