FBI and CISA Warn Hackers Are Targeting Industrial Fridges Worldwide

How the attacks work

According to the authorities, attackers go after temperature regulators and fridge controllers in supermarkets and refrigerated warehouses. They exploit flaws in outdated devices, many of which can be reached from the internet by anyone. Once in control, they can force units to heat or start a defrost cycle, overheating the contents.

Beyond lost stock, the agencies cite premature equipment wear, fire risk and a health hazard for consumers. Attackers can also hide the real temperature from administrators, which could allow spoiled products to be sold. "Any organization that relies on refrigeration and monitoring systems should assume it could be a target," said Chris Butera, acting deputy executive assistant director for cybersecurity at CISA.

The alert follows a wave of attacks on European supermarkets, particularly in France. Last month, hundreds of French stores saw their fridges climb to 50 °C overnight. Similar attacks later hit several European countries, as well as cold rooms of the Établissement français du sang. In the US, the Pentagon is investigating suspicious freezer failures at military bases, according to Reuters.

What organizations should do

The agencies urge "immediate" action: disconnect equipment from the internet, change default passwords, apply updates and replace old devices the manufacturer no longer supports.

Some operators are already reacting. Researchers at Censys found the number of Danfoss controllers exposed online fell from 3,004 to 708 between 9 October and 5 November. Danfoss was among the makers whose controllers were compromised in the French campaign. Thousands of controllers remain reachable, however, including 2,420 from Dixell, another brand hit by intrusions.