Israel cyber alert: hackers targeting supermarket fridges

Israel's National Cyber Directorate issued an urgent alert Monday to supermarket chains, food companies and logistics centres, warning of cyberattacks targeting internet-connected refrigeration and freezer control systems. The warning follows an unusual wave of attacks recorded across Europe in recent days, in which hackers succeeded in remotely seizing control of temperature-control systems in supermarkets.

In the European attacks, hackers exploited vulnerabilities in internet-connected control systems to cause physical damage. Among other methods, the attackers remotely altered temperature settings and activated defrost systems in ways that caused fridges and freezers to heat up. The result: spoilage of large quantities of food, heavy financial losses and disruption to supermarket operations.

The most prominent incident occurred overnight Sunday into Monday in Belgium, where the Delhaize chain confirmed that some 40 of its stores were hit, mainly convenience and smaller shops. The Carrefour chain reported damage at 15 branches, and five Spar stores were also included on the list of victims. Butcher shops from the De Laet en Van Haver group and the chocolate company Galler also reported problems with their refrigeration systems.

In Sweden, the major food chains ICA and Coop were hit, and at one branch the temperature reached 50 degrees Celsius. Hundreds of thousands of euros' worth of food may be lost as a result of the attack. The National Cyber Directorate stresses that the incidents in Europe illustrate the need to protect not only information systems but also operational systems connected to the network.

Following the incidents, the National Cyber Directorate contacted Israeli supermarket chains and recommended they conduct an immediate inspection of refrigeration and control systems, with emphasis on systems that allow remote access for technicians and service providers. The chains were asked to report back to the directorate on their inspection and implementation of protective measures.

Among the recommendations: ensure that control systems are not directly exposed to the internet, replace default passwords, update outdated systems, secure remote access using multi-factor authentication, and activate independent alerts for unusual temperature changes. The National Cyber Directorate is calling on all organisations operating remote refrigeration and control systems to examine their defences and report any unusual activity to the directorate's operations centre.