11
New cyberattack on supermarket fridges sweeps across Europe (www.reuters.com)
submitted 1 week ago by to c/infrastructure@sh.itjust.works
6 comments fedilink hide all child comments
 

A hacking attack on European supermarkets spread across the continent on Monday, hitting fridges and freezers from Sweden to Belgium and forcing stores to throw away food in an incident that echoed a similar attack in France last month.

...

Everything is destroyed," Engla Ingwall, sales manager at an ICA franchise store in Stockholm, told Reuters during a visit to the store on Monday, adding the attack occurred at 2 a.m. (0100 GMT) but was only noticed hours later.

"There has been a cyberattack and all our freezers reached 50 degrees (Celsius)."

A spokesperson for privately held ICA said the company was aware that a "limited number of stores were affected by an incident overnight, which impacted their refrigeration and freezer systems".

all 6 comments

sorted by: hot top controversial new old
[–] [S] 8 points 1 week ago (4 children)

It's likely confirmation bias but I've never encountered a Building Automation System that didn't make me scratch my head and wonder where the adults were.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 1 point 1 week ago (1 child)

    what gets me is so no one took the france attack to heart and hardened their systems. I still don't seriously see why this is necessary. you have employees. doing a temp check at start and end and intervals between. heck have the cleaning staff do checks overnight. I mean the chance of having a freezer or fridge go down under thos circumstances long enough to lose product is small and if it does happen you lose like one units thing and thats it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] [S] 1 point 1 week ago

    So we don't yet know the details of the attacks but it is certainly possible that the systems that were attacked didn't patch a vulnerability identified earlier in the year.

    I shared an analysis I found in another post.

    In the past decade I moved from a place that took security very seriously to a place that I'm not sure even has a complete network diagram, so my expectations of competence in control system security in private companies is basically nil. It's slightly higher in some government systems only because it's a lot easier to be a tyrannical admin if people aren't really paying attention to you. But you gotta luck out and have the right person in the role.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 2 points 1 week ago

    Third party access to HVAC is how Home Depot got hacked.

    The disruption and the food loss are bad, but I really think the bigger problem is the potential for a persistent foothold.

  • permalink
  • fedilink
  • source
    •