The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Key Points:
- Multiple attacks targeted internet-connected refrigerators in France, raising temperatures in cold rooms storing blood and plasma, but no damage occurred due to quick detection and response by staff.
- Similar cyberattacks have affected supermarket chains across Europe and US military commissaries, causing widespread food spoilage and prompting investigations by authorities including the Pentagon and French law enforcement.
- The attacks exploited vulnerabilities in outdated refrigeration controllers, particularly those made by Danish firm Danfoss, with weak passwords and unpatched firmware being common issues.
- Attribution remains uncertain, with possible involvement of Russia-based and Iran-linked actors, though no definitive evidence has been provided and the Kremlin denies participation.
- Experts emphasize the critical need for fundamental cybersecurity practices such as updating firmware, restricting internet connectivity, and monitoring IoT devices to protect fragile cold-chain infrastructure.