Increasing Attacks on Refrigeration Systems
US government agencies, including the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI), issued urgent warnings to organizations operating in the healthcare, chemicals, food, and transportation sectors, stressing the need to enhance the security of industrial refrigeration control systems and monitor cold supply chains. This move comes in the wake of a wave of cyberattacks targeting refrigerators and freezers in major stores and blood banks across Europe, causing heavy financial losses.
Nature of the Threat and Implications
On October 11, hundreds of stores were subjected to attacks in which perpetrators raised refrigerator temperatures to 50 degrees Celsius and switched freezers to the defrost mode, leading to food spoilage and fires in some cases. This week also witnessed a second wave targeting over 100 stores and blood banks, though rapid intervention by staff prevented damage to medical samples.
Estimates indicate that attackers are exploiting vulnerabilities in unpatched control units or those connected directly to the internet, bypassing authentication or injecting code to remotely control temperature settings, which imposes continuous heating cycles that damage inventory and equipment.
What Organizations Must Do
US agencies emphasize that the most effective measure is to completely disconnect control systems from the internet. If remote access is necessary, these systems must be protected via firewalls or specialized edge devices. Security recommendations also include:
- Isolating Operational Technology (OT) devices from public networks.
- Restricting access to trusted identities only.
- Implementing strong password policies and using phishing-resistant multi-factor authentication.
- Updating systems regularly and keeping offsite backups.
- Enabling monitoring logs and security auditing.
According to data from digital intelligence firm Censys, the number of internet-exposed refrigeration controllers dropped from 6,695 units on October 9 to 3,124 units by November 5, indicating an initial response by operators to mitigate risks.