As cited
Copy frozen at (site build).
ot ics
Defrost and Disrupt | An Assessment of Europe’s Refrigeration Attacks
Refrigeration systems at supermarkets across Belgium, Estonia, Germany, Ireland, Luxembourg, the Netherlands, Portugal, and Sweden experienced overnight disruption on November 2-3, following similar incidents at French stores in October. Attackers altered temperature and defrost settings by accessing management interfaces, exploiting internet-exposed administration portals and weak credentials rather than published software vulnerabilities. While Russian-aligned groups with a history of operational technology disruptions are one credible hypothesis, investigators have not yet publicly established responsibility or confirmed whether these incidents constitute a single coordinated campaign.
Why it matters: Operators of Danfoss, Copeland, and Dixell refrigeration controllers face immediate risk from the same weak-credential and internet-exposure conditions that enabled these attacks; isolate affected systems from public internet access and enforce strong authentication and network segmentation now, and assume compromise of any exposed systems with default or weak passwords.
- Source published
- First seen by Cybersecurity Tracker