Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
Overview
On October 11, attackers gained remote access to refrigeration units in hundreds of French supermarkets, raising the temperature of fridges and freezers to as high as 50°C. This incident forced several retail chains, including Les Mousquetaires, to discard large quantities of food, leading to significant financial losses. The attackers exploited vulnerabilities in the Danfoss controllers that manage these cooling systems, which are typically accessed by maintenance companies remotely. This incident raises serious concerns about the security of IoT devices used in commercial settings, as it demonstrates how a cyber attack can directly impact food safety and waste. Retailers are now urged to reassess their security measures for critical infrastructure to prevent similar incidents in the future.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: Danfoss controllers used in supermarket refrigeration systems
- Action Required: Retailers should implement stricter access controls and regularly update their IoT device security protocols.
- Timeline: Ongoing since October 11, 2023
Original Article Summary
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store's fridges and freezers, a device made by Danish company Danfoss that maintenance firms can manage remotely. Les Mousquetaires
Impact
Danfoss controllers used in supermarket refrigeration systems
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Ongoing since October 11, 2023
Remediation
Retailers should implement stricter access controls and regularly update their IoT device security protocols.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Critical.