Second wave of attacks on Danfoss-linked supermarket refrigeration hits Delhaize and Colruyt stores in four European countries
A second wave of suspected cyberattacks has hit supermarket refrigeration across Belgium, Ireland, Luxembourg and Sweden, raising temperatures and spoiling food at dozens of stores. Ahold Delhaize and Colruyt confirmed the incidents. A Belgian company that operates Delhaize's systems said the attackers changed the settings to defrost, per Reuters. The wave follows earlier attacks in France last month that spoiled food at hundreds of supermarkets. The article gives no attribution for the European attacks, though US Department of Defense officials are reportedly investigating whether freezer units on military bases were hacked by Iran-backed actors.
Detalhes técnicos
- Security researchers attribute the French incidents to internet-connected refrigeration units made by Danfoss, which no longer receives security updates.
- Claroty warned in August that these units were at risk of remote hacks and outages.
- The attackers deliberately changed temperature or defrost settings.
- The article does not state the exact access method, any CVEs or any IOCs, and does not confirm that the second wave involved the same Danfoss devices.
Remediação
The article gives no explicit guidance. Its implication is that internet-exposed, end-of-life refrigeration controllers carry a real risk of remote tampering.
Linha do tempo
-
Second wave of attacks on Danfoss-linked supermarket refrigeration hits Delhaize and Colruyt stores in four European countries
ler a análise desta fonte ocultar
A second wave of suspected cyberattacks has hit supermarket refrigeration across Belgium, Ireland, Luxembourg and Sweden, raising temperatures and spoiling food at dozens of stores. Ahold Delhaize and Colruyt confirmed the incidents. A Belgian company that operates Delhaize's systems said the attackers changed the settings to defrost, per Reuters. The wave follows earlier attacks in France last month that spoiled food at hundreds of supermarkets. The article gives no attribution for the European attacks, though US Department of Defense officials are reportedly investigating whether freezer units on military bases were hacked by Iran-backed actors.
Technical Details
- Security researchers attribute the French incidents to internet-connected refrigeration units made by Danfoss, which no longer receives security updates.
- Claroty warned in August that these units were at risk of remote hacks and outages.
- The attackers deliberately changed temperature or defrost settings.
- The article does not state the exact access method, any CVEs or any IOCs, and does not confirm that the second wave involved the same Danfoss devices.
Remediation
The article gives no explicit guidance. Its implication is that internet-exposed, end-of-life refrigeration controllers carry a real risk of remote tampering.