International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 6 · Tier D15 sources

Hackers abuse refrigeration controllers to send spam and route proxy traffic

Help Net Security · By Sinisa Markovic ·

The Brief · written from 15 sources

  • U.S. agencies CISA, FBI, HHS, USDA and the Department of Transportation issued a joint advisory on attacks against industrial refrigeration controllers.
  • Threat actors are reportedly targeting industrial refrigeration and cold-chain monitoring systems globally, aiming at service disruption, fire hazards and inventory loss.
  • SecurityScorecard found internet-exposed refrigeration controllers in supermarkets and cold storage being hijacked for a suspected spam botnet and proxy services.

Why it matters

Internet-exposed refrigeration controllers can be hijacked to disrupt operations, create fire hazards and destroy inventory, and they can also be abused as spam and proxy infrastructure.

Who’s affected

  • Operators of industrial refrigeration and cold-chain monitoring systems
  • Supermarkets and cold storage facilities with internet-exposed controllers
  • Healthcare labs and other organisations relying on refrigerated storage

What to do

  1. Take refrigeration controllers off the public internet, as the advisory recommends as its most basic fix
  2. Apply the basic security fixes described in the CISA and FBI joint advisory
  • #iot
  • #industrial-control-systems
  • #refrigeration
  • #botnet
  • #critical-infrastructure

Internet-exposed refrigeration controllers used in supermarkets and cold storage facilities are being hijacked and turned into infrastructure for a suspected spam botnet and proxy services, SecurityScorecard has found. The report follows a string of attacks against European…

Read the full story at helpnetsecurity.com ↗

Timeline

  1. TechCrunch

    US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers

  2. The Record from Recorded Future News

    Harden cooling systems now, feds warn critical infrastructure operators amid attacks

  3. BleepingComputer

    FBI, CISA warn of cyberattacks targeting refrigeration systems

  4. Help Net Security

    US agencies warn attackers are targeting refrigeration systems that protect food and medicine

  5. Security Affairs

    ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe

  6. SecurityWeek

    US Agencies Urge Organizations to Harden Refrigeration Controllers

  7. Security Latest publishes analysis of escalating fridge-hacking attacks on blood labs and grocery stores

  8. Security Latest

    The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call

  9. U.S. agencies publish joint advisory warning of attacks on industrial refrigeration controllers

  10. SecurityScorecard reports refrigeration controllers hijacked for suspected spam botnet and proxy traffic

  11. The Hacker News

    U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses

  12. Security Affairs

    CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers

  13. Help Net Security

    Hackers abuse refrigeration controllers to send spam and route proxy traffic

  14. Techmeme

    French officials say Iran's Revolutionary Guards were behind the cyberattacks that knocked out commercial refrigerators and freezers across France in October (Reuters)

  15. BleepingComputer

    France blames Iranian hackers for supermarket attacks that sparked fires

  16. The Record from Recorded Future News

    France blames Iran for fridge cyberattacks, says some caused fires

  17. Security Affairs

    France Blames Iran for the Supermarket Fridge Attacks

  18. TechCrunch

    France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks

Full coverage · 15 sources

How do you feel about this?

0 Comments