CISA, FBI Warn of Ongoing Attacks on Industrial Refrigeration Systems Linked to Suspected Iranian Actors
CISA, the FBI, and the U.S. Departments of Agriculture, Health and Human Services, and Transportation issued a joint advisory warning of an 'ongoing cyber threat' targeting internet-connected industrial refrigeration and cold chain monitoring systems. The warning follows waves of attacks against supermarket freezers across the United Kingdom and Europe, a French blood bank, and U.S. military refrigeration units, in which attackers manipulated temperature settings to spoil food, threaten blood supplies, and risk fire hazards or equipment damage. Some compromised systems were manufactured by Danish company Danfoss, which had stopped providing security updates for the affected units. While the U.S. has not formally attributed the attacks, researchers and officials reportedly suspect Iran is behind the campaign.
Detalhes técnicos
Attackers are reportedly gaining remote access to internet-exposed refrigeration control systems and forcing units into continuous heating and defrost cycles, causing inventory loss and equipment hazards. Affected sectors span food, agriculture, transportation, and medical cold-chain operations, including a blood bank in France where an attack on refrigerated blood storage was stopped before causing losses, and U.S. military bases currently under Department of Defense investigation.
Remediação
CISA, the FBI, and partner agencies urge affected organizations to remove remote-control refrigeration systems from direct internet exposure, change and strengthen passwords, apply available patches, and retire equipment no longer supported by vendors.
Linha do tempo
-
CISA, FBI Warn of Ongoing Attacks on Industrial Refrigeration Systems Linked to Suspected Iranian Actors
ler a análise desta fonte ocultar
CISA, the FBI, and the U.S. Departments of Agriculture, Health and Human Services, and Transportation issued a joint advisory warning of an 'ongoing cyber threat' targeting internet-connected industrial refrigeration and cold chain monitoring systems. The warning follows waves of attacks against supermarket freezers across the United Kingdom and Europe, a French blood bank, and U.S. military refrigeration units, in which attackers manipulated temperature settings to spoil food, threaten blood supplies, and risk fire hazards or equipment damage. Some compromised systems were manufactured by Danish company Danfoss, which had stopped providing security updates for the affected units. While the U.S. has not formally attributed the attacks, researchers and officials reportedly suspect Iran is behind the campaign.
Technical Details
Attackers are reportedly gaining remote access to internet-exposed refrigeration control systems and forcing units into continuous heating and defrost cycles, causing inventory loss and equipment hazards. Affected sectors span food, agriculture, transportation, and medical cold-chain operations, including a blood bank in France where an attack on refrigerated blood storage was stopped before causing losses, and U.S. military bases currently under Department of Defense investigation.
Remediation
CISA, the FBI, and partner agencies urge affected organizations to remove remote-control refrigeration systems from direct internet exposure, change and strengthen passwords, apply available patches, and retire equipment no longer supported by vendors.