Dahua Technology

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
Zhejiang Dahua Technology Co., Ltd.
TypePublic company
SZSE: 002236
IndustryVideo surveillance Solutions
Founded2001
HeadquartersHangzhou, Zhejiang, China
Area served
Worldwide
ProductsSecurity cameras, network cameras, HDCVI analog-to-HD solutions, NVR/DVR, PTZ cameras, fisheye cameras
RevenueIncrease US$[4.06 billion (2020)][1]
Number of employees
+18,000 (2020)
SubsidiariesLorex
Chinese name
Simplified Chinese浙江大华技术股份有限公司
Traditional Chinese浙江大華科技股份有限公司
Websitedahuasecurity.com

Zhejiang Dahua Technology Co., Ltd. is a partially state-owned publicly traded company based in Binjiang District, Hangzhou,[2] which sells video surveillance products and services. It was founded and controlled by Fu Liquan (傅利泉).[3] Dahua Technology has been listed on the Shenzhen Stock Exchange since its IPO in 2008.[4] The company is a component of multiple indices, including SZSE Component Index, SZSE Composite Index, and SZSE 300 Index.

History[edit]

In 2018, Dahua acquired security video camera company Lorex.[5][6]

In November 2020, Dahua won a US$9 million, 1,900-camera smart city project with the public security bureau of Jiexiu.[7]

In April 2021, Motorola Solutions announced that IndigoVision, a Motorola Solutions-owned company, would no longer relabel Dahua cameras, citing U.S. NDAA and supply-chain concerns.[8]

In 2021 Best Buy, Home Depot, and Lowe's stopped selling cameras from Dahua brand Lorex due to concerns about Dahua's complicity in surveillance and human rights violations in Xinjiang.[9]

In November 2021, Dahua was named in the Secure Equipment Act as one of several entities prohibited from receiving U.S. telecommunication equipment licenses due to national security reasons.[10]

In June 2020, Dahua was presented with the Commissioner's certification mark from the United Kingdom's Biometrics and Surveillance Camera Commissioner.[11] In June 2022, Dahua was named as the third top company for ANPR and perimeter intrusion detection in a survey conducted by Asmag.com.[12][13]

Corporate affairs[edit]

Shareholders[edit]

Dahua Technology is majority owned and fully controlled by Fu Liquan and his wife Chen Ailing.[14] As of 31 December 2020, Fu owned 34.18% shares as the largest shareholder, while Chen owned 2.38%.[15]

According to its 2020 annual financial report, Dahua Technology is also partially state-owned by Central Huijin Asset Management and China Galaxy Securities Co., Ltd. at 1.05% and 1.82 respectively.[15] Central Huijin Investment is a state-owned enterprise and wholly owned subsidiary of China Investment Corporation,[16] a sovereign wealth fund that reports to the State Council of the People's Republic of China.[17][18]

China Mobile acquired a 10.42% stake in Dahua in March 2021.[19]

Partnerships[edit]

In 2016, Dahua partnered with Dell to build smart security systems.[20] In 2017, Dahua partnered with Beijing University of Posts and Telecommunications (BUPT) to build a joint intelligent video laboratory.[21] Beginning in late 2019, Dahua began to partner with the Vatican Museum, providing security and full implementation over five years.[22] In 2022, IPVM reported that Amazon Web Services provides cloud services to Dahua.[23]

Security issues[edit]

Cybersecurity vulnerabilities[edit]

In September 2016, the largest DDoS attack to date, on KrebsOnSecurity.com, was traced back to a botnet. According to internet provider Level 3 Communications, the most commonly infected devices in this botnet were Dahua and Dahua OEM cameras and DVRs.[24][25][26] Nearly one million Dahua devices were infected with the BASHLITE malware.[24][27][28] A vulnerability in most of Dahua's cameras allowed "anyone to take full control of the devices' underlying Linux operating system just by typing a random username with too many characters."[24] This was exploited, and malware installed on devices that allowed them to be used in "both DDoS attacks as well as for extortion campaigns using ransomware."[24]

In March 2017 a backdoor into many Dahua cameras and DVRs was discovered by security researchers working for a Fortune 500 company.[29] The vulnerability had been activated on cameras within the Fortune 500 company's network, and the data trafficked to China through the company's firewall.[30] Using a web browser, the vulnerability allowed unauthorised people to remotely download a device's database of usernames and passwords and subsequently gain access to it.[31][32] Dahua issued a firmware update to fix the vulnerability in 11 of its products.[33] Security researchers discovered that the updated firmware contained the same vulnerability but that the vulnerability had been relocated to a different part of the code. This was characterized by the security researchers as deliberate deception.[30]

In March 2021, the Federal Communications Commission declared that Dahua services and equipment "pose an unacceptable risk to U.S. national security.”[34] In response, The Intercept said, “the U.S. government has not provided the public with any evidence that Dahua and Hikvision are spying on customers.”[35]

In September 2021, Dahua acknowledged an identity authentication bypass vulnerability affecting over 30 device models that, if exploited, can allow attackers to "bypass device identity authentication by constructing malicious data packets."[36] In October 2021, TechCrunch reported that The Home Depot and Best Buy stopped selling Lorex-branded Dahua and Ezviz products.[37]

Mass surveillance of ethnic minorities[edit]

Dahua has played a role in the mass surveillance of Uyghurs in Xinjiang.[38][39] In October 2019, the U.S. government placed Dahua on the Bureau of Industry and Security's Entity List for its role in surveillance of Uyghurs in Xinjiang and of other ethnic and religious minorities in China.[40][41] In November 2020, after security researchers identified facial identification software code with designations by ethnicity, Dahua removed the code in question from GitHub.[42] In February 2021, the Los Angeles Times published an investigation of Dahua's technology for the purpose of Uyghur surveillance.[43]

Security Industry Association expulsion[edit]

The Security Industry Association, a U.S.-based trade organization representing electronic and physical security solutions providers the United States, terminated Dahua Technology's membership on June 1, 2021, citing unnamed violations of its code of ethics.[44][45]

See also[edit]

References[edit]

  1. ^ "巨潮资讯网".
  2. ^ "Contact us". Zhejiang Dahua Technology Co., Ltd. Archived from the original on 2021-03-10. Retrieved 2021-03-15. Dahua Technology Co., Ltd. No.1199, Bin'an Road, Binjiang District, Hangzhou, China P.C:310053 - Chinese address Archived 2021-03-11 at the Wayback Machine: 杭州市滨江区滨安路1199号
  3. ^ Flannery, Russell (October 26, 2016). "Chinese Entrepreneur Who Sold His Home To Start A Business Adds To Billionaire Fortune". Forbes. Archived from the original on October 27, 2016. Retrieved 2020-05-24.
  4. ^ Chatterjee, Sumeet; Zhu, Julie (May 29, 2017). "RPT-China's Dahua Tech plans up to $1 bln Hong Kong share sale - sources". Reuters. Archived from the original on July 27, 2022. Retrieved August 8, 2022.
  5. ^ Biddle, Sam (July 20, 2021). "U.S. Military Bought Cameras in Violation of America's Own China Sanctions". The Intercept. Archived from the original on July 23, 2021. Retrieved July 24, 2021.
  6. ^ Healy, Conor; Ward, Derek (July 20, 2021). "Illegal Hidden Dahua and Hikvision Sales, Sellers and 'Manufacturers' Blame Each Other". IPVN. Archived from the original on July 20, 2021. Retrieved July 24, 2021.
  7. ^ Cheng, Isabella (9 November 2020). "Dahua Direct $9 Million Jiexiu Small City, Big Deal". IPVM. Archived from the original on 17 July 2021. Retrieved 16 July 2021.(Subscription required.)
  8. ^ Honovich, John (19 April 2021). "IndigoVision OEMs Avigilon, Drops Dahua". IPVM. Archived from the original on 16 July 2021. Retrieved 16 July 2021.(Subscription required.)
  9. ^ Clark, Mitchell (25 October 2021). "Best Buy and Home Depot drop security cameras linked to Uyghur surveillance". www.theverge.com. The Verge. Archived from the original on 1 November 2021. Retrieved 1 November 2021.
  10. ^ "US President Joe Biden tightens restrictions on Huawei and ZTE". BBC News. 2021-11-12. Archived from the original on 2021-11-23. Retrieved 2021-11-23.
  11. ^ "Organisations that have been issued with the Commissioner's certification mark", Gov.UK, July 21, 2022, archived from the original on August 10, 2022, retrieved August 17, 2022
  12. ^ Aby Thomas, Prasanth; Lin, Emily (June 22, 2022), "Top 5 ANPR license plate recognition companies: 2022 reader survey", asmag, archived from the original on June 28, 2022, retrieved August 17, 2022
  13. ^ Aby Thomas, Prasanth; Lin, Emily (June 20, 2022), "Top 5 perimeter intrusion brands: 2022 asmag.com reader survey", asmag, archived from the original on August 10, 2022, retrieved August 17, 2022
  14. ^ 大华股份:遭实控人减持7375万股. caixin (in Chinese (China)). 12 May 2017. Archived from the original on 12 May 2017. Retrieved 24 May 2020.
  15. ^ a b "2019 Annual Report". Shenzhen Stock Exchange. April 2020. pp. 105–108. Archived from the original on May 24, 2020. Retrieved May 24, 2020.
  16. ^ Xiangming, Hou; Spring, Jake (2015-09-06). "Central Huijin Investment to issue 30 bln yuan bond on Friday". Reuters. Archived from the original on 2021-05-09. Retrieved 2020-05-24.
  17. ^ Ren, Daniel (March 3, 2017). "State-backed institutions outshine stock-focused mutual peers". South China Morning Post. Archived from the original on April 4, 2017. Retrieved May 24, 2020.
  18. ^ Ying, Moxy (November 17, 2018). "When Stocks Crash, China Turns to Its 'National Team'". Bloomberg News. Archived from the original on August 9, 2019. Retrieved May 24, 2020.(Subscription required.)
  19. ^ Rollet, Charles (2021-03-29). "State-Owned China Mobile Acquires 10% of Dahua". IPVM. Archived from the original on 2021-06-05. Retrieved 2021-06-05.(Subscription required.)
  20. ^ "Dahua enlisted in Forbes Asia's 13th annual Fab 50". Source Security. Archived from the original on 2022-09-28. Retrieved 2022-08-08.
  21. ^ "Dahua Partners With Beijing University To Create Intelligent Video Joint Laboratory". Secureity Electronics and Networks. March 23, 2017. Archived from the original on September 28, 2022. Retrieved August 8, 2022.
  22. ^ "Dahua Technology Italy e i Musei Vaticani: Custodi dell'Arte". S News. December 11, 2019. Archived from the original on September 28, 2022. Retrieved August 8, 2022.
  23. ^ Healy, Conor (2022-09-26). "Amazon Powers Dahua and Hikvision Sales and Cloud Services". IPVM. Archived from the original on 2022-09-28. Retrieved 2022-09-28.
  24. ^ a b c d Franceschi-Bicchierai, Lorenzo (29 September 2016). "How 1.5 Million Connected Cameras Were Hijacked to Make an Unprecedented Botnet". Vice. Archived from the original on 3 June 2019. Retrieved 2019-06-03.
  25. ^ Goodin, Dan (2 October 2016). "Brace yourselves—source code powering potent IoT DDoSes just went public". ARS Technica. ARS Technica. Archived from the original on 3 October 2016. Retrieved 2 October 2016.
  26. ^ "Attack of Things!". Level 3 Blog. Level 3 Communications. Archived from the original on 3 October 2016. Retrieved 3 October 2016.
  27. ^ "BASHLITE malware turning millions of Linux Based IoT Devices into DDoS botnet". HackRead. 2016-09-02. Archived from the original on 3 October 2016. Retrieved 3 October 2016.
  28. ^ "BASHLITE Botnets Ensnare 1 Million IoT Devices". www.securityweek.com. Archived from the original on 2019-06-03. Retrieved 2019-06-03.
  29. ^ ipvideomarket (6 March 2017). "Dahua Backdoor Uncovered". IPVM. Archived from the original on 3 June 2019. Retrieved 2019-06-03.
  30. ^ a b J. FREEDBERG JR., SYDNEY (5 July 2019). "Hacker Heaven: Huawei's Hidden Back Doors Found". breakingdefense.com. Breaking Defense. Archived from the original on 7 July 2019. Retrieved 7 July 2019.
  31. ^ "Dahua backdoor". Krebs on Security. Archived from the original on 2019-06-03. Retrieved 2019-06-03.
  32. ^ at 02:58, Richard Chirgwin 8 Mar 2017. "Dahua video kit left user credentials in plain sight". The Register. Archived from the original on 3 June 2019. Retrieved 2019-06-03.
  33. ^ "Dahua security camera owners urged to update firmware after vulnerability found". The State of Security. 8 March 2017. Archived from the original on 3 June 2019. Retrieved 2019-06-03.
  34. ^ Shepardson, David (2021-03-13). "Five Chinese companies pose threat to U.S. national security: FCC". Reuters. Archived from the original on 2021-03-12. Retrieved 2021-03-13.
  35. ^ Biddle, Sam (2021-07-20). "U.S. Military Bought Cameras in Violation of America's Own China Sanctions". The Intercept. Archived from the original on 2021-07-23. Retrieved 2021-12-14.
  36. ^ "Security Advisory - Identity authentication bypass vulnerability found in some Dahua products". Dahua Technology. Dahua Technology Co., Ltd. 2021-09-01. Archived from the original on 2021-10-11. Retrieved 2021-10-15.
  37. ^ Whittaker, Zach (October 25, 2021). "US retail giants pull Chinese surveillance tech from shelves". TechCrunch. Archived from the original on October 25, 2021. Retrieved October 25, 2021.
  38. ^ Jennifer Chang, I-wei (2019-12-04). "Taiwan's "Warm Power": Sharing Lessons on Digital Governance". globaltaiwan.org. Global Taiwan Institute. Archived from the original on 14 December 2019. Retrieved 14 December 2019.
  39. ^ "Amazon buys heat-sensing cameras from blacklisted Chinese firm". The Guardian. Reuters. 2020-04-29. ISSN 0261-3077. Archived from the original on 2020-05-02. Retrieved 2020-05-03.
  40. ^ Shepardson, David (2019-10-07). "U.S. puts Hikvision, Chinese security bureaus on economic blacklist". Reuters. Archived from the original on 2019-10-07. Retrieved 2019-10-07.
  41. ^ Swanson, Ana; Mozur, Paul (2019-10-07). "U.S. Blacklists 28 Chinese Entities Over Abuses in Xinjiang". The New York Times. ISSN 0362-4331. Archived from the original on 2020-04-15. Retrieved 2020-05-24.(Subscription required.)
  42. ^ Borak, Masha (November 5, 2020). "Chinese surveillance giant expanding in the US attracts scrutiny over possible targeting of Uygurs". South China Morning Post. Archived from the original on November 6, 2020. Retrieved November 6, 2020.
  43. ^ Bhuiyan, Johana (February 9, 2021). "Major camera company can sort people by race, alert police when it spots Uighurs". Los Angeles Times. Archived from the original on February 9, 2021. Retrieved February 10, 2021.
  44. ^ "The Security Industry Association Expels Dahua". IPVM. June 8, 2021. Archived from the original on June 8, 2021. Retrieved June 8, 2021.
  45. ^ "SIA Supports Ethical Uses of Security Technology". Security Industry Association. June 1, 2021. Archived from the original on 2021-06-07. Retrieved June 8, 2021.

External links[edit]