Supermarket freezers across Europe hit by second suspected cyber-attack

The magic question is: why isn’t this fixed yet? And then the specifics, the nitty grift of why not. Thousands of industrial fridges. They presumably all need new hardware, or at least tenporarily all need a RPi with additional software on the network cable, or it could even worse… are they on regular company wifi? Don’t these companies have VLANs? It’s astonishing that this is what brings billion dollar companies in a key supply chain down.

This little gimmick cost Ahold in the Netherlands an estimated 300 M€ a few weeks back. Enough money for any firm to set the engineers to work? Where they waiting it out? Having read some more… another part of Ahold (the Belgian part) was hit and has (only now…) taken all fridges down from the internet. What is IT risk doing in a firm like that? Internet of Shit is a decade old. I am not amazed non tech sectors are perhaps a bit slower in IT risk management. I am amazed that an ongoing attack situation can still cause trouble 4 months after publication and months after board level headline grabbing numbers are widely publicized.

Me and my crew (yet to form ;) will visit any fridge for a measly 100 K€ a pop to take them offline. Book early, because once the script kiddies hit, we are on the road.

Not officially at war (or even cyberwar) but... are we at war?

What sort of electronic shitfight is about to go down between major powers?

Unpopular opinion: Accessing a public service with public default credentials is not a cyber attack but a consequence of severe misconfiguration. This is on the supermarkets, not on the attackers.

I mean in US these TV dinners, all these frozen foods are just way of life. Could it be that some good European citizens are angry with frozen foods and it is just their way of telling "EAT FRESH FOOD".

Some more discussion: https://news.ycombinator.com/item?id=50335602

"Fool me once, shame on you, fool me twice, shame on me." But it should have been, like Bush said: "Fool me once, shame on — shame on you. Fool me — you can't get fooled again."

... Who the fuck is putting this shit on a network that's not closed circuit?

maybe we'll start going back to _not_ having all devices connected to the internet "just because we can"

Admin interface available on the internet without 2fa and automatic password change once a week? Anyone gaining sufficient experience and seniority in the industry becomes instantly unemployable, so it is what it is.

It truly feels like Europe is just collectively shrugging at their lack of preparedness and aggression they face. What’s it going to take for them to take their own security seriously?

here's hoping no country is stupid enough to have an ICBM on the internet

but you just know someone will eventually if not already

because some vendor thought it would be easier for monitoring or firmware update

Can't tell if it will be some asshole hacker group, Russia, the us, or what. But for the love of God please stop connecting everything to the Internet and also ai...

Two things:

1) I hope they learn some hard lessons about security and what should be exposed to the internet vs LAN.

2) These are some evil ass people doing this shit.

imagine that happens to a nuclear reactor

[dead]

[dead]

[flagged]

[flagged]

[dead]

[flagged]

that's insane, they just got hit recently right?

Hackers remotely override settings on thousands of freezers, fridges and chiller cabinets, pushing them from as low as -27C to well over 50C. Intermarché, Coopérative U, Carrefour, Leclerc and Monoprix chains among those affected.