Threat Intelligence Brief
Curated summary with source attribution
Source: darkreading.com
Threat Risk: High
Victim: European Retail/Supermarket Chains
Incident: Compromise of refrigeration control systems causing forced defrost cycles.
Impact: Millions of euros in food spoilage, equipment damage, and localized fires.
Attacker: Unidentified threat actors
Analysis: Attackers exploited internet-facing OT controllers by using default credentials, specifically ‘admin’ paired with the current date. This systemic vulnerability across Danfoss, Dixell, and Copeland systems allowed the threat actor to trigger extended defrost cycles. The incident highlights the extreme risk of exposing legacy industrial control systems directly to the public internet.
Recommendations: Disable public internet access for all OT and ICS controllers.; Change all default administrative passwords immediately.; Audit legacy hardware for end-of-life status and implement compensating network controls.
Source: Dark Reading
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source