The French government’s national cybersecurity agency ANSSI has warned that attack campaigns are likely still underway targeting refrigeration equipment.
The warning by the agency’s CERT-FR computer emergency response team comes after further attacks on French supermarkets reportedly took place on Tuesday night, this time involving Copeland and Dixell controllers.
French newspapers reported that a Dixell-equipped supermarkets in Bordeaux and Lescure-d’Albigeois were hit by similar attacks last night.
CERT-FR warns that maintaining internet access to equipment without a security patch (end of life) exposes it to a “very high probability” of compromise. “Performing only a factory reset is insufficient in this case; while the persistence of a compromised instance will be removed, the equipment will remain vulnerable and will almost certainly be compromised again,” it says.
The agency adds that it is aware of numerous compromises of Danfoss AK-SM, AK-SC series remote controllers for refrigeration systems, as well as Copeland xweb and Dixell xweb.
“In general, exposing a management interface on the Internet is contrary to good practices,” it says.
