SecurityScorecard has determined that refrigeration controllers accessible via the internet, those employed in cold storage and supermarkets, are being compromised and repurposed to function as components within a suspected spam botnet and for proxy operations.
This discovery emerges subsequent to a series of incidents targeting refrigeration apparatus across Europe. Help Net Security began documenting these events in October, a period during which numerous French supermarkets were forced to discard perishable inventory because malicious actors gained control of the systems managing their refrigeration units, causing them to switch to heating overnight.
These compromised controllers, which are exposed to the internet, are now being utilized for malicious networking activities.
This pattern of exploitation highlights vulnerabilities within operational technology infrastructure, demonstrating how seemingly isolated environmental control systems can be integrated into broader cyber threats.
Why it matters
This demonstrates a critical vulnerability in operational technology infrastructure, extending beyond simple physical sabotage. Operators must urgently assess the security posture of internet-facing industrial controllers to prevent them from being weaponized for cybercrime.
