First fridges, what next? The crucial systems that could be targeted
With no hacker taking credit, cybersecurity agencies are scrambling to discover who is behind the latest fridge attack. Now, experts say that this could just be the beginning.
TL;DR
- Supermarket fridges and freezers in seven European countries were hit by a cyberattack that caused temperatures to reach 50°C.
- The attacks targeted Delhaize supermarkets in Belgium and Luxembourg, along with brands in Ireland, Sweden, Estonia, Finland, and the Netherlands.
- No clear financial motivation or hacker has claimed responsibility, leading to investigations by cybersecurity agencies.
- Experts warn that this could be the beginning of attacks on any internet-connected device, including critical infrastructure like water and power, as well as everyday systems like lifts and traffic control.
- Similar incidents have recently affected French supermarkets and US military bases, raising concerns about a potential wider sabotage program by nation-states.
- Supermarket supply chains are seen as easy targets due to their extensive network of interconnected systems and potential vulnerabilities.
- Future targets could include medical refrigeration systems, building controls, door locking systems, lifts, water and power plants, transport infrastructure, and food logistics systems.
- Attacks on healthcare and pharmaceutical refrigeration could lead to spoiled medicines, blood samples, and severe disruptions in patient care.
- The increasing number of internet-connected devices expands the 'attack surface' for hackers.
- Older critical infrastructure systems may lack modern cybersecurity controls, making them more vulnerable.
- AI is accelerating the rate at which hackers can find vulnerabilities.
- Disruption of heating, ventilation, access controls, or connected machinery can bring businesses to a standstill without data theft.
- Attacks on building and lift systems could trap occupants, halt ventilation, or interfere with emergency services.
- Compromising data center controls can lead to server destruction, while tampering with hospital or pharmaceutical cleanroom controls can destroy sterile environments and contaminate supplies.
- A cyberattack on critical infrastructure could paralyze a country, leading to societal collapse.
- The UK's National Cyber Security Centre warns of AI-powered ransomware attacks on critical national infrastructure by 2028, with nation-states likely to use AI for geopolitical goals.
- Experts highlight decades of underinvestment in cybersecurity as a significant contributing factor to current vulnerabilities.