42
Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack (www.theguardian.com)
submitted 1 week ago by [M] to c/news@beehaw.org
22 comments fedilink hide all child comments
 

Hackers have forced the temperature of many French supermarket fridges up to 50C overnight, in an “unprecedented” cyber-attack affecting several hundred stores across the country, with fires and food losses reported.

The Paris prosecutor’s office said on Monday ⁠the large-scale attack was “affecting connected refrigerators ⁠in several ​major food retailers across France”. Reported damage included “food losses and fires”, it added.

The prime minister, Sébastien Lecornu, instructed France’s national cybersecurity agency ANSSI to investigate, ⁠a person in his office said.

France “was coordinating with its European counterparts, as other countries may also be affected”, while also investigating whether any other French ⁠firms were at risk, they said.

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 1 week ago (3 children)

I work in manufacturing, and the trend there is that most machine suppliers will deliver a machine with it's own PLC where the programming is walled off. They then offer you subscription based support, where they can connect remote through vpn or with a router/5G connection. You need tech-savvy managers to understand the huge risk this carries. Fortunately, lots of people are waking up in Europe due to the NIS2 directive.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 1 week ago (2 children)

    Ok, so the fancy new systems are even worse than I expected. I have some experience with the older ones though.

    Either those systems were never designed with the Internet in mind, or the people who installed them knew what they were doing and disabled all the unnecessary connections and features. Either way, the systems I've seen are probably pretty tricky to hack. I you want to change anything, you would need to be physically in the same network as the automation system itself.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 week ago (1 child)

    That's pretty much my experience too. I also just read that the Danfoss hack involved the username admin and for the password the date of today. A company like Danfoss should really know better, even if it was never meant to be connected to the internet.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •