Russian hacktivists say they were behind freezer hacks, but speculation remains

Two Russian hacktivist groups, Noname057(16) and Z-Pentest Alliance, have claimed responsibility for the recent wave of freezer hacks affecting European supermarkets. However, their Telegram posts and channels have since been deleted, leaving their claims open to skepticism. Cyber-security researchers are analyzing evidence from honeypots to uncover the identity of the attackers.

While Russian groups are not being ruled out, other possibilities include Iranian hacktivists, nation-state hackers, or even teenagers carrying out the hacks for entertainment. Three separate cyber-security firms deployed fake freezer software traps, known as honeypots, to monitor hacker tactics. The second wave of attacks was highly targeted, suggesting planning and coordination.

The entry point into the freezer software products was easily exploitable due to poor protection. The hackers had to gather public IP addresses of the affected devices, plan their methods, and execute them at the right time. Analysts noted that the hackers increased the temperature of the freezers overnight for maximum damage. Other firms, such as Lupovis and Sequoia, also observed pre-attack activity, but some suggest the scanning could have been automatic and not malicious.

While the attacks align with patterns seen in Russian hacktivist or government actions, investigations are ongoing to confirm the identity of the perpetrators. Authorities in several countries are actively investigating the hacks and warning supermarkets about potential future attacks.