FBI, CISA warn of cyberattacks targeting refrigeration systems
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards.
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards.
According to a joint advisory published Thursday, attackers are exploiting weaknesses in unpatched or internet-accessible electronic temperature controllers and commercial refrigeration management systems.
The warning follows a series of attacks against European refrigeration systems that have disrupted supermarkets and blood storage facilities.
A second wave of attacks reported in November affected more than 115 stores across six European countries, with some refrigeration systems shutting down entirely and others raising temperatures to as high as 50°C (122°F).
Departments of Health and Human Services (HHS), Agriculture (USDA), and Transportation (DOT), urging critical infrastructure operators to secure vulnerable refrigeration controllers used in healthcare, food production, chemical facilities, and transportation.
These devices allow operators to monitor temperatures remotely, manage defrost cycles, and control cooling equipment.
FBI disrupts Chinese hacking tools used to breach critical infrastructure
Successful attacks can cause inventory losses, reduce equipment lifespan, create fire hazards, and create unsafe storage conditions.
The agencies say attackers may exploit authentication bypass vulnerabilities, arbitrary code injection flaws, or weak configurations to modify temperature settings and force refrigeration equipment into continuous heating or defrost cycles.
In October, hackers compromised refrigeration controllers at an estimated 250 to 350 French supermarkets, remotely activating defrost functions and raising temperatures in refrigerators and freezers.
What happened
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards.
According to a joint advisory published Thursday, attackers are exploiting weaknesses in unpatched or internet-accessible electronic temperature controllers and commercial refrigeration management systems.
What changed
The warning follows a series of attacks against European refrigeration systems that have disrupted supermarkets and blood storage facilities.
A second wave of attacks reported in November affected more than 115 stores across six European countries, with some refrigeration systems shutting down entirely and others raising temperatures to as high as 50°C (122°F).
Who is affected
Departments of Health and Human Services (HHS), Agriculture (USDA), and Transportation (DOT), urging critical infrastructure operators to secure vulnerable refrigeration controllers used in healthcare, food production, chemical facilities, and transportation.
These devices allow operators to monitor temperatures remotely, manage defrost cycles, and control cooling equipment.
Why it matters
FBI disrupts Chinese hacking tools used to breach critical infrastructure
Successful attacks can cause inventory losses, reduce equipment lifespan, create fire hazards, and create unsafe storage conditions.
Technical details
The agencies say attackers may exploit authentication bypass vulnerabilities, arbitrary code injection flaws, or weak configurations to modify temperature settings and force refrigeration equipment into continuous heating or defrost cycles.
In October, hackers compromised refrigeration controllers at an estimated 250 to 350 French supermarkets, remotely activating defrost functions and raising temperatures in refrigerators and freezers.
agencies are urging organizations to remove refrigeration controllers from the public internet, secure necessary remote access, change default passwords, and apply available security updates.
Response
They also recommend isolating operational technology systems from business networks and enforcing safe temperature limits to prevent controllers from operating outside acceptable ranges.
Attribution
BleepingComputer: The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards.
What to watch next
Watch for new exploitation reports and updated indicators of compromise.
Watch for updated vendor guidance and fixed-version details.