New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food

Summary: Attackers remotely changed settings on internet-connected refrigeration controls at supermarkets in Belgium, Sweden, Estonia and other European countries overnight into Monday, November 2, warming fridges and freezers; some stores discarded chilled and frozen food. Danfoss, whose controllers were involved in the attacks as they were in an earlier wave against hundreds of French supermarkets three weeks prior, said the Dutch systems hit were not on a secure network and still used default passwords, while a butcher in Hove estimated about €15,000 of meat was ruined.
What you should know: The entry point was not a novel exploit but internet-exposed controllers running outdated software and default passwords - and Danfoss said the Dutch shops hit were the few that had not acted after the French attack, so the difference between a resolved incident and €15,000 of spoiled meat was whether a known fix had been applied.

Read the original at The Hacker News ↗