New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food
Overview
On November 2, 2023, supermarkets across Europe, including countries like Belgium, Sweden, and Estonia, experienced a wave of cyberattacks that targeted refrigeration systems. Attackers remotely altered the settings of refrigeration controls, causing fridges and freezers to warm up. While no chain reported extensive damage, several dozen stores were affected, leading to the disposal of chilled and frozen food and removal of items from shelves. This incident raises concerns about the security of critical infrastructure and how vulnerable it is to cyber threats. Danfoss, a Danish company that produces refrigeration controls, is involved in the investigation of these attacks, which could have broader implications for food safety and supply chains across the region.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: Refrigeration controls by Danfoss at supermarkets in Belgium, Sweden, Estonia, and other European nations.
- Action Required: Investigating the attacks and potentially updating security protocols for refrigeration systems.
- Timeline: Ongoing since November 2, 2023
Original Article Summary
Attackers remotely changed the settings on refrigeration controls at supermarkets in Belgium, Sweden, Estonia and other European countries overnight into Monday, November 2, warming fridges and freezers. No chain reported more than several dozen affected stores, and some had to throw away chilled and frozen food or take it off the shelf. Danfoss, a Danish maker of refrigeration controls,
Impact
Refrigeration controls by Danfoss at supermarkets in Belgium, Sweden, Estonia, and other European nations.
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Ongoing since November 2, 2023
Remediation
Investigating the attacks and potentially updating security protocols for refrigeration systems.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Critical.