Breachpwn.watchICS / OT (industrial control)

    Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB)

    Teaser from the source

    Overnight on Oct 11 to 12, attackers took remote control of internet-exposed refrigeration controllers at about 700 French supermarkets (Intermarché and Netto, Coopérative U, Carrefour with 80 stores, Monoprix, E. Leclerc and others), forcing fridges and freezers into continuous defrost with setpoints around 50°C, spoiling fresh and frozen stock and reportedly causing small fires. A second wave followed the next night and also hit stores with Dixell controllers. CERT-FR names Danfoss AK-SM and AK-SC series plus Copeland and Dixell xweb controllers, says campaigns are probably still ongoing, and tells operators to take every controller off the public internet. Most affected Danfoss units are end-of-life models (AK-SM 800, AK-SC 355) that get no fixes; the entry vector and attacker are still unconfirmed.

    This is the RSS-feed teaser. Read the full article at the original source.

    Read at pwn.watch

    Source: https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks

    ID