U.S. government agencies are alerting global industries to a developing cyber threat targeting industrial refrigeration and cold-chain monitoring systems. These attacks aim to disrupt services, create potential fire risks, and lead to inventory losses. The warning, issued in a joint advisory, highlights the exploitation of unpatched or vulnerable internet-accessible controllers by malicious actors.
Critical Vulnerabilities and Exploits
According to agencies including the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and others, attackers are likely taking advantage of authentication bypasses and weak configurations. These vulnerabilities allow hackers to manipulate system settings, potentially altering temperatures, shortening the service life of systems, and causing consumer safety concerns.
There is also a risk of losing visibility into temperature conditions due to denial-of-service attacks. This can result in significant disruptions in maintaining the integrity of temperature-sensitive goods.
Recommended Security Measures
In light of these threats, system owners and operators are urged to implement robust security measures. Recommendations include employing strong authentication protocols, updating systems regularly, and identifying any internet-accessible systems. Additionally, isolating operational technology devices, changing default passwords, and retiring outdated equipment are advised to minimize risks.
FBI Cyber Branch Operations Director Brett Leatherman emphasized the global targeting of these systems, which are essential for preserving food, medicine, and other sensitive products, making them prime targets for cybercriminals.
Global Impact and Ongoing Threats
Recent incidents have been documented across Europe, with attackers exploiting refrigeration controllers in supermarkets and other facilities, causing temperature spikes that led to spoiled goods and financial losses. Notable attacks affected various countries, including Belgium, France, and the U.K.
The French Blood Establishment was among the affected, experiencing unauthorized temperature alterations in facilities storing blood plasma. The perpetrators of these attacks remain unidentified.
Data from Censys indicates a decrease in the exposure of certain refrigeration system instances, yet hundreds remain vulnerable, primarily in France. The platform notes these attacks as part of a broader trend targeting critical infrastructure, including gas station gauges and water systems.
Despite shifts in exposure percentages globally, the danger of industrial control system vulnerabilities persists. These systems are crucial to worldwide infrastructure, and their security is of paramount importance.
