Am I hacked?

[FlipNJ]

All of my cameras have unknown users that can't be deleted because they are reserved users. Each memo is CISA.
I'm not super concerned but need to purge those users. Anyone have info?

 

[bigredfish]

1- disconnect from the Internet

2- in the NVR GUI (or individual cameras) do a factory default

What is hacked? The NVR or individual cams?
What model?
What firmware version?

 

[FlipNJ]

1- disconnect from the Internet

2- in the NVR GUI (or individual cameras) do a factory default

What is hacked? The NVR or individual cams?
What model?
What firmware version?

Individual using Blue Iris. Dahua 5231, also newer Empire Tech 8k ones also several users.

 

[bigredfish]

Ok, you need a BI guy, I'm an NVR guy

Still I'd disconnect.

 

[bigredfish]

Are you using P2P or is P2P enabled on your cams?
If so, any firmware prior to Aug 2024 can be comprimised

 

[iwanttosee]

Is port forwarding used?

 

[EagleEye7]

I'm not super concerned

Erm, you probably should be.

That is certainly not ideal.

If using BI, first off, are you still allowing the cameras access to the internet? P2P or Port Forwarding?
You need to make sure nothing else on the network is affected. How is your network set up in terms of layout?