Malaysia must bolster cyber resilience as Europe supermarket attacks expose risks - Experts

KUALA LUMPUR: Malaysia must enhance its operational cyber resilience, according to a cybersecurity expert who highlighted recent supermarket refrigeration system attacks in Europe. Adjunct Professor Murugason R. Thangaratnam of the University Malaysia of Computer Science and Engineering explained that internet-connected devices like refrigeration controllers and building management systems are often prioritized for convenience and uptime over security.

Once online, these systems become vulnerable to attacks. The issue, he said, is the convergence of operational technology (OT) and information technology (IT) security, with refrigeration under OT security.

Thangaratnam said Malaysia and the industry are grappling with this gap, expressing concern about the potential for similar attacks in Malaysia. He emphasized the need for greater visibility into connected systems, removal of default passwords, public exposure, and the establishment of manual fallback plans. He stressed that security must be integrated throughout the supply chain, involving third-party vendors and service providers, not just the retailers themselves.

Cyberattacks on refrigeration systems in Europe forced stores to discard spoiled food, with hundreds of supermarkets in France affected in October and additional attacks in early November across several European countries. Thangaratnam pointed out that weak default passwords and internet-exposed devices could allow unauthorized access to connected equipment, enabling hackers to alter temperature settings or disable alarms.

He noted that default passwords like '1234' are widely known, and public search engines like Shodan can identify exposed devices in mere minutes.