Tämä tiedetään kylmälaitehyökkäyksistä: 10 maata, yli 100 kauppaa, teurastamoja…
Kylmälaitehyökkäykset kauppoihin eivät ole tämänhetkisen tiedon mukaan jatkuneet maanantain ja tiistain välisenä yönä. Kolme viikkoa sitten Ranskassa nähtiin kyberiskuja ainakin kahtena peräkkäisenä yönä, mutta nyt nähty iskusarja ei vaikuta saaneen jatkoa.

Iskut ovat kohdistuneet tiettävästi ainakin yhdeksään maahan. Hyökkäyksiä on ollut Suomen lisäksi ainakin Ruotsissa, Virossa, Irlannissa, Belgiassa, Italiassa, Luxemburgissa, Alankomaissa ja Portugalissa, kertoo tietoturvasivusto Bleeping Computer.

Lisäksi Tanskassa on tiedossa yksi hyökkäyksen yritys, joka onnistuttiin keskeyttämään.

Ennen Italian ja Portugalin lukuja tiedossa oli onnistuneita hyökkäyksiä yli 115 myymälään. Alankomaissa kohteena oli myös teurastamoja.

Tietoturvayhtiö Censys kertoi maanantaina löytäneensä yli 1000 internetiin näkyvää Danfoss StoreView -kylmälaitehallintaliittymää.

Hyökkäyksen tekijästä ei ole uutta tietoa. Ainakin Belgian viranomaiset ovat käynnistäneet tapauksesta tutkinnan. Ranskassa tutkinta avattiin kolme viikkoa sitten ensimmäisten hyökkäysten myötä.

–
Danfoss StoreView is the remote user management interface family used to connect, view, and configure Danfoss supermarket system managers like the legacy AK-SM 800 and the current AK-SM 800A.
The platform has transitioned from older, legacy client applications into a unified, web-based remote management tool

Staff at supermarkets across Europe arrived on Monday morning to find freezers and chillers blasting hot air.

Units that should have stayed near freezing had been driven overnight to 50–55°C.

At an ICA store in Stockholm the attack hit around 2 a.m. local time and went unnoticed for hours.

Sales manager Engla Ingwall told Reuters that “everything is destroyed,” as staff loaded shopping carts with ruined meat, dairy and frozen goods that had to be thrown away.

The same disruption has been confirmed at ICA and Coop stores in Sweden, at dozens of Ahold Delhaize locations plus Colruyt, Carrefour, SPAR and Intermarché outlets in Belgium and Luxembourg, at least one IKEA, and 13 SuperValu stores in Ireland.

Further reports have come from the Netherlands, Estonia and Finland.

Company statements and early investigations indicate attackers remotely accessed internet-connected refrigeration controllers, including systems from Danfoss that were also targeted in France last month.

They forced the units into continuous defrost mode or simply overrode the temperature settings, allowing the contents to warm for hours while the stores were closed.

The method matches a cyberattack that struck hundreds of French supermarkets in mid-October.

Estimates from that incident reached as high as 700 stores across chains including Intermarché, Carrefour, Coopérative U and Monoprix.

Freezers climbed as high as 50–80°C, large quantities of food spoiled, and in several locations the extreme heat sparked fires.

Losses ran into the millions of euros.

No group claimed responsibility and no ransom demand appeared.

EU Agriculture and Food Commissioner Christophe Hansen has described the repeated attacks as “a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it,” adding that the pattern is deeply concerning.

Supermarket operators are now discarding stock and posting notices that refrigerated and freezer shelves are empty because of the cyberattack.

One Belgian Delhaize branch has already estimated losses of around €100,000 in a single store.

The same class of refrigeration controllers remains widely deployed across the continent.

In many cases the devices stay exposed to the internet so they can be monitored and maintained remotely.

That configuration has now allowed the same form of sabotage to disrupt stores in at least seven countries in a matter of weeks.

These attacks are alarming precisely because they’re so simple and so effective.

A remote override turns the systems that keep food safe into the means of destroying it.

The October wave in France already showed what a larger, better-timed strike can do: hundreds of stores emptied at once, millions of euros of product lost, and public confidence shaken.

A broader attack coordinated across more countries or aimed at distribution hubs could spoil far larger volumes of meat, dairy and frozen goods before anyone noticed.

Governments across Europe have spent recent months warning households to prepare for exactly this kind of disruption.

The UK launched a “Be Ready” campaign advising three days of non-perishable food and water.

France, Germany, the Nordic countries and others have issued similar guidance, ranging from 72 hours to a week or more, citing cyberattacks, hybrid threats and interruptions to everyday supply.

The European Commission’s Preparedness Union Strategy likewise urges citizens to be able to cope independently for at least 72 hours.

When freezers can be turned into ovens from anywhere and officials are already telling people to stockpile, the vulnerability of the food chain is being shown in real time across multiple countries.

The attack caused temperatures in fridges and freezers to rise sharply, with at least one store reporting temperatures of up to 50°C (122°F) and other retailers discarding food. It’s sparked concerns across the retail industry.

Read more: cnb.cx/47QDiCZ

https://www.kauppalehti.fi/uutiset/a/062a28a8-06ee-4006-a52f-e5a76587a1d0?utm_term=Autofeed&utm_medium=Social&utm_source=Facebook#Echobox=1793718766

A small number of UK freezers were impacted in a suspected hack that saw fridge and freezer temperatures spike across Europe, Britain’s cybersecurity chief has said.

Dr Richard Horne, head of the National Cyber Security Centre (NCSC), said there was evidence of “a couple of impacts” within the food supply chain in the UK and that vulnerable technology had been “exploited”.

Hackers are deliberately spoiling supermarket food across Europe by remotely turning up the heat in commercial freezers.

A coordinated cyberattack targeted grocery retailers in at least eight European countries, including Sweden, Belgium, Estonia, and Ireland, forcing stores to discard large quantities of ruined inventory. Attackers breached retail networks and manipulated the controls of commercial Danfoss refrigeration systems, intentionally switching evaporators to defrost mode and spiking freezer temperatures as high as 55°C (131°F).

The European Union has condemned the mass disruption as a deliberate attempt to undermine the regional food supply chain. Major supermarket brands like Carrefour, ICA, and SuperValu are currently working alongside cybersecurity agencies to secure their vulnerable network installations and prevent further food waste.

How should the retail industry secure critical infrastructure against remote tampering?