Hackers escalate Europe's fridge attacks, now target France's blood banks

A recent surge of cyberattacks targeting fridges and freezers in Europe has raised concerns, with hackers gaining unauthorized access to cold storage systems at medical facilities in France. The French Blood Establishment, EFS, reported that their blood supplies were preserved and no loss of blood products occurred. However, the incidents have exacerbated a trend of hacks affecting supermarkets and food retailers across the continent, resulting in significant financial losses and food waste.

Last month, hackers targeted hundreds of supermarkets in France, forcing temperatures to soar to 50 degrees Celsius overnight, leading to food losses and fires. The attacks have since spread to the U.K., Italy, Germany, Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands, and Sweden. EU Commissioner for Agriculture Christophe Hansen described the repeated occurrences of these cyberattacks as "deeply concerning," emphasizing the threat they pose to the food supply chain and consumer confidence.

Connected fridges can be remotely controlled and monitored via internet-connected software, but this convenience introduces vulnerabilities. Hackers can exploit publicly reachable, outdated, or unpatched remote refrigeration management controllers that often use default passwords or weak administrative bypasses. Retail chains, with their extensive networks of refrigeration controllers, building management systems, door access panels, and point-of-sale equipment, are particularly attractive targets for cybercriminals.

The identities of the attackers remain unknown, with possibilities ranging from Russian hacking groups, Iranian hacktivists, or nation-state hackers to even potential amateur hackers. Cybersecurity researchers have installed honeypots in an attempt to gather information about the perpetrators. As the situation unfolds, cybersecurity experts continue to grapple with the challenges posed by these sophisticated attacks.