Threat Intelligence Brief
Curated summary with source attribution
Source: darkreading.com
Threat Risk: High
Victim: European grocery and retail chains
Incident: Coordinated exploitation of refrigeration controllers to cause widespread food spoilage.
Impact: Financial losses totaling tens to hundreds of millions of euros and localized fire hazards.
Attacker: Unidentified threat actors
Analysis: Attackers exploited known RCE and DoS vulnerabilities in Danfoss refrigeration controllers to remotely manipulate temperatures, effectively turning cooling units into heaters. By extending defrost cycles, the actors successfully masked the temperature spikes as routine maintenance to avoid detection. This incident underscores the severe physical and financial risks associated with exposing unpatched OT systems to the public internet.
Recommendations: Immediately update Danfoss AK-SM 800A platform firmware to the latest patched version; Isolate OT and ICS controllers from the public internet using strict firewall rules or VPNs; Implement independent, out-of-band temperature monitoring and alerting systems
Source: Dark Reading
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source