We are dealing with a Ransomware issue that took over a client's entire network (very large and complex network infrastructure with many systems across the network). The VMS system was also taken over.
The client determined they would not pay the ransom and all systems are being wiped, reimaged or rebuilt. All details aside, I am curious if anyone knows the impact that ransomware could have on the individual camera. This is a large enterprise VMS system (redundant master servers, multiple recorders with failover, dual redundant NIC ports/power supplies/controllers, etc).
Everything is back on line from the VMS standpoint (although much of the other campus systems are still down), however we have a high concentration of a specific camera (I would prefer not to name the manufacturer) that we cannot get to come online. We cannot access the camera's homepage at all, neither from within the VMS or outside the VMS going direct to the camera.
So my question is: What impact, if any, does ransomware have on a camera? Can ransomware take over the individual cameras?
I have yet to find anything online beyond ransomware events that took over an entire system, no specific mention of the impact this could have on individual camera or how ransomware could impact different types of cameras based on camera build/design/engineering.
