US agencies urge hardening of industrial refrigeration after EU attacks
Original title: U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks
Attackers remotely changed cold-chain temperatures at French blood banks and European supermarkets, spoiling goods and triggering fires.
CISA, the FBI, HHS, USDA and the Department of Transportation issued a joint fact sheet telling critical infrastructure operators to secure commercial refrigeration and cold-chain controllers. Agencies say attackers seek unpatched flaws, misconfigurations and weak or hard-coded passwords, then change temperatures so food, blood and other products spoil; temperature changes may also create fire hazards. ANSSI has investigated attacks since mid-October and is aware of compromises of Danfoss AK-SM and AK-SC series controllers and Copeland and Dixell XWEB controllers. Hundreds of French grocery stores were hit several weeks ago.
Unconfirmed: Specific vulnerabilities and the attackers responsible are not named; ANSSI's investigation is ongoing.
- Sectors named include healthcare, chemicals, transportation, and food and agriculture.
- Recommended steps include changing default passwords and isolating OT from business networks.
- Agencies also advise removing unnecessary remote access and replacing end-of-life devices.
- ANSSI told Cybersecurity Dive it is investigating compromises of named controller families.
Impact: Remote temperature changes can spoil food or blood and start fires
| Product | Affected |
|---|---|
| Danfoss AK-SM and AK-SC series controllers | — |
| Copeland controllers | — |
| Dixell XWEB controllers | — |
- 1.Change default passwords and use strong authentication on refrigeration controllers.
- 2.Patch critical vulnerabilities and replace end-of-life devices.
- 3.Isolate OT systems and remove unnecessary remote access.
- Countries
- FranceUnited States
From the original article
4 min read at tenable.com
Following recent cyber attacks on French blood banks and European supermarkets, U. S. federal agencies are urging critical infrastructure organizations to immediately secure industrial refrigeration systems against remote tampering and temperature manipulation.
By Christopher Day · tenable.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.