Abstract:
The U.S. government recently issued a security alert stating that industrial refrigeration equipment is facing "persistent cyber threats." This warning comes as large-scale cyber attacks targeting freezers, refrigeration equipment and cold chain monitoring systems have occurred in many places around the world. The affected areas have affected supermarkets, cold storages, blood storage institutions and US military bases.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and multiple federal departments jointly stated that attackers are targeting refrigeration control systems and temperature monitoring equipment connected to the Internet. These systems are widely used in critical infrastructure areas such as food, agriculture, transportation, pharmaceutical logistics, and cold chain warehousing.
The U.S. government pointed out that once the attack is successful, hackers can remotely modify the temperature settings of the equipment, thereby causing actual physical impacts, including fire risks, inventory loss, shortened equipment life, and operational disruptions. The agency stressed that any organization that relies on refrigeration and temperature monitoring systems to operate should assume that they may be targeted.
This warning stems from a number of cold chain system network incidents that have recently occurred in Europe and the United States. In the past few weeks, industrial refrigeration equipment in the UK and many European countries has suffered at least two rounds of large-scale attacks. Hackers increased the temperature of freezing equipment by manipulating the remote control system, causing the frozen food originally stored to thaw and deteriorate, and agricultural products to be damaged. More than ten countries were affected.
In the latest round of attacks in Europe, the temperature of supermarket refrigeration equipment in Sweden, Belgium, Luxembourg and Ireland was artificially increased, forcing a large amount of food to be scrapped. Some retail companies have confirmed that their refrigeration systems have been illegally tampered with, resulting in frozen and refrigerated goods on the shelves being no longer available for sale.
The investigation shows that some of the affected equipment comes from Danfoss, a Danish refrigeration technology company. Because some models have stopped receiving security updates, researchers believe these devices have known vulnerabilities that make them easier targets.
In addition to the food supply chain, the medical industry has also been affected. The refrigeration system of a French blood bank was recently targeted by hackers. The attacker attempted to increase the temperature of the refrigerated equipment storing donated blood samples. Fortunately, relevant agencies discovered the anomaly in time and prevented further attacks before the blood reserves were compromised.
At the same time, the U.S. Department of Defense is also investigating a series of unusual incidents involving refrigeration equipment at military bases. According to reports, since August this year, refrigeration equipment in military supermarkets in multiple military bases in the United States has failed one after another, affecting about six military supply facilities. Investigators are assessing whether the incidents were part of an organized cyberattack.
U.S. officials have not officially attributed the incident to any specific organization or country, but multiple security research institutions believe that Iran may be related to these attacks. Some U.S. officials and industry experts have also listed Iran as a key suspect. However, as of now, the U.S. government has not announced the final conclusion of the investigation.
The joint security bulletin also points out that attackers can not only increase the temperature or force equipment into heating and defrosting modes, but can also interfere with operators viewing real-time temperature data, thereby making monitoring and disposal more difficult. In addition to food and pharmaceutical spoilage, the risk of equipment damage and consumer exposure to unsafely stored products cannot be ignored.
To reduce risks, the U.S. government recommends that relevant companies take immediate protective measures, including removing remote control systems from the public network, strengthening password security, promptly installing software patches, isolating corporate networks and industrial control networks, and phasing out old equipment that has stopped being supported and updated.
U.S. cybersecurity officials said that such incidents once again prove that many seemingly ordinary infrastructure devices have become new targets for cyber attacks. From supermarket freezers to blood storage systems to military base cold chain equipment, any industrial control system that is connected to the Internet and lacks adequate protection can be used to carry out sabotage in the real world. As the scope of attacks continues to expand, the global cold chain industry is facing increasingly severe cybersecurity challenges.
Comments