Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System
Source Palo Alto Unit 42
Description
In late 2026, cyberattacks targeted refrigeration systems in Europe, primarily affecting supermarkets and some medical facilities. Attackers gained unauthorized access to refrigeration controllers, setting them to defrost mode and raising temperatures up to 50°C, causing widespread food spoilage and some fires. The initial access vector remains unconfirmed but may involve vulnerable software versions or default credentials. Over 5,000 internet-exposed devices related to these systems were identified, with a notable decline in exposed devices in France following the attacks. Pro-Russian hacktivist groups claimed responsibility, though this is unverified. CISA issued warnings about potential exploitation methods including authentication bypass and arbitrary code injection. Palo Alto Networks recommends leveraging their security products and services to detect and mitigate risks associated with exposed refrigeration controllers.