Adversary Intelligence — 2026-08-22

Slovakia Security Authority Finds Russian Backdoor in 279 Traffic Cameras Linked to St Petersburg Manufacturer Via Cyprus Shell Company

BLUFSunk costs and prior ministerial denials make formal contract cancellation unlikely by November 20, but the Cyprus shell company procurement chain poses the more consequential counterintelligence question.

Slovakia's national security service NBU issued a warning on the NERO R-ONE high-speed traffic camera system, stating the devices contain a backdoor granting shell and network access via SMS messages sent from 12 hardcoded Russian phone numbers registered in St Petersburg and the Kemerovo region 12. NBU identified the cameras as a rebranded version of the Russian CORDON PRO.M model manufactured by St. Petersburg-based firm Semicon, procured without a competitive tender through the Cyprus-registered shell company Sodasus using forged conformity certificates, as part of a €30 million EU-funded project to rebuild the country's national traffic monitoring system 1. The Interior Ministry had bought and was preparing to install 279 of the units before NBU's report, and had previously denied the cameras were of Russian origin, asserting no data-theft risk since the devices would run on a closed-loop ministry network 1. NBU's technical assessment also found SecureBoot disabled, multiple vulnerabilities in the web management portal, and live video streams exposed without password protection to anyone aware of the broadcasting IP 1. The Interior Ministry paused deployment following the findings and said it would commission an independent audit to confirm them 12.

Analysis
Slovakia's pause does not resolve the exposure: 279 units already purchased sit in inventory under the €30 million EU-funded contract, and cancellation is unlikely by November 20 given sunk cost and the ministry's prior denials of Russian origin. Confidence is moderate, resting on a single technical source with no independent corroboration, though the disabled SecureBoot and unauthenticated video streams are concrete, verifiable defects rather than disputed claims; Risky Business and Tom's Hardware only repackage NBU's warning rather than independently verifying it. The ministry's insistence on network segmentation may reflect genuine confidence rather than denial of a known risk. Procurement accountability, not the cameras' fate, is the near-term flashpoint: cancellation exposes the Cyprus shell company and EU-funded contract to fraud scrutiny, while proceeding after audit normalizes Russian-manufactured hardware with a confirmed backdoor inside Slovak critical infrastructure.

3 sources

Slovakia finds Russian backdoor in traffic speed cameras - Risky Business
Slovakia discovers Russian backdoors in 279 new traffic cameras - Tom's Hardware
Varovanie pred rizikami cestných meradiel (Warning on the risks of road speed measurement devices) - National Security Authority of Slovakia (NBÚ/SK-CERT)