Freezer-control hacks disrupt about 700 French supermarkets
Original title: Why Europe's Freezer Hacks Spread So Far, So Fast
An October 11 attack forced long defrost cycles on Danfoss, Dixell and Copeland systems, causing millions of euros in damage.
On the night of October 11, an unknown attacker reportedly compromised refrigeration controls used by hundreds of French supermarkets, triggering extended defrost cycles. Dark Reading reports roughly 700 stores in France, spoiled food, damaged equipment, some fires and millions of euros in damage. The equipment included Danfoss controllers and Dixell and Copeland XWEB systems, many with internet-facing web servers. CERT-FR advised password changes, factory resets and firmware updates; Danfoss told AFP many targeted products are legacy and no longer updated.
Unconfirmed: How the attacker first gained access has not been publicly confirmed.
- CERT-FR named Danfoss AK-SM and AK-SC controllers plus Copeland and Dixell XWEB systems.
- Many Danfoss controllers accepted username “admin” and the current date as the password.
- Investigators have not publicly confirmed the initial access vector.
- SentinelLABS describes a common exposure problem rather than market concentration.
Impact: Refrigeration controls forced into defrost, spoiling food and equipment
| Product | Affected |
|---|---|
| Danfoss AK-SM and AK-SC controllers | legacy products no longer updated |
| Copeland XWEB | — |
| Dixell XWEB | — |
- 1.Change default passwords on exposed refrigeration controllers.
- 2.Factory-reset compromised equipment.
- 3.Update firmware where the vendor still provides it.
- Organizations
- CERT-FRSentinelLABS
- Countries
- France
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 3ef22544cbb516d50d8fedafef6855a8 | -delta-industrial-plcs#recipe=similar-items&sourcecontentid=3ef22544cbb516d50d8fedafef6855a8) Trio of Critical Bugs Spotted in Delta Industrial PLCs by |
| md5 | 519f866bd9cb0808a2c4934672007466 | ensors-silent-tracking#recipe=similar-items&sourcecontentid=519f866bd9cb0808a2c4934672007466) Vehicle Tire Pressure Sensors Enable Silent Tracking by J |
| md5 | 6709b09566c154b383fa194e8d34ff5f | mpatible-work-securely#recipe=similar-items&sourcecontentid=6709b09566c154b383fa194e8d34ff5f) AI in OT Sparks Cascade of Complex Challenges by Arielle |
| md5 | a7eb29aeaac9d69fb51ea172d29e5391 | king-systems-tampering#recipe=similar-items&sourcecontentid=a7eb29aeaac9d69fb51ea172d29e5391) Critical Railway Braking Systems Open to Tampering by Nat |
From the original article
8 min read at darkreading.com
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
By Alexander Culafi · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.