US Agencies Urge Hardening of Refrigeration Controllers
Original title: US Agencies Urge Organizations to Harden Refrigeration Controllers
Attackers have tampered with European supermarket fridges and blood banks, prompting US agencies to urge internet isolation and OT device hardening.
US government agencies including CISA, the FBI, HHS, USDA, and DoT are warning healthcare, chemical, food, and transportation organizations about malicious cyber actors targeting refrigeration and cold chain monitoring systems. Over the past weeks, attackers have altered temperatures in supermarket fridges and freezers across Europe, causing millions in losses, food spoilage, and fires in some cases. A second wave of attacks hit more than 100 supermarkets and a blood bank, though staff protected blood products and samples. The agencies say actors may exploit vulnerabilities in unpatched or internet-accessible controllers to remotely alter settings and force continuous heating or defrost cycles.
Unconfirmed: Hacktivist claims about Danfoss are unconfirmed; Iranian hacktivists or state-sponsored hackers may also be responsible
- Attackers turned fridges to 50°C and freezers to defrost on October 11
- Second wave hit over 100 supermarkets plus one blood bank
- Quick staff action prevented blood product compromise
- Censys shows XWEB exposure dropped 35% and StoreView 76%
- Agencies recommend taking systems off the internet
Impact: Remote alteration of temperature settings causing spoilage, fires, and inventory loss
| Product | Affected |
|---|---|
| Danfoss StoreView | — |
| Copeland XWEB | — |
- 1.Take control systems off the internet
- 2.Isolate OT devices
- 3.Enforce strong password policies and phishing-resistant MFA
- Threat actors
- noname057(16)z-pentest alliance
- Victims
- supermarketsblood banks
From the original article
2 min read at securityweek.com
The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe. The post US Agencies Urge Organizations to Harden Refrigeration Controllers appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.