2026年10月11至12日晚间，法国超过400家超市的冷柜系统遭受网络攻击，黑客将制冷设备强制切换至除霜模式，导致温度升至50°C1。这次事件造成食品损毁和设备火灾，经济损失可能达数百万欧元1。受影响的连锁超市包括家乐福80家门店、Intermarché和Netto超过300家、Monoprix约5%的门店以及Coopérative U 80家1。
调查显示，此次攻击得以实施的根本原因在于设备安全防护的长期缺陷1。受影响的冷柜主要使用丹佛斯公司的过时控制器，包括AK-SM 800和AK-SC 355型号1。在攻击发生前数月，这些系统的漏洞就已存在且设备暴露在互联网上1。2026年10月6至7日的安全扫描发现，法国境内有1,331个丹佛斯StoreView仪表板处于在线状态，其中85%（1,136个）存在已知安全漏洞1。这些易受攻击的系统包括527个不再获得供应商支持的旧控制器、280个缺少2023年安全补丁的设备，以及329个缺少2025年补丁的设备1。
攻击发生后，应急措施迅速启动1。到10月14日，法国在线的丹佛斯系统数量从1,331个下降至316个，下降幅度达76%1。法国网络安全部门（CERT-FR）随后发布指导意见，建议将控制器离线或限制网络访问，必要时通过安全VPN进行远程连接，同时更新固件、设置严格的安全级别并更改默认密码1。巴黎检察官办公室已启动调查程序，但暂未公开披露攻击者身份或具体入侵方式1。此外，波兰、美国和葡萄牙等国也发现类似的在线暴露系统，分别有157个、85个和77个设备处于风险状态1。
Hundreds of French supermarkets fell victim to a coordinated cyberattack on the night of October 11-12, 2026, when hackers compromised refrigeration control systems and forced them into defrost mode, causing temperatures to spike to 50°C.1 The attack affected more than 400 store locations across major chains, including 80 Carrefour outlets, over 300 Intermarché and Netto stores, approximately 5 percent of Monoprix locations, and 80 Coopérative U stores.1 The resulting food spoilage and equipment fires are expected to cost retailers millions of euros in damages.1
The compromise exploited long-standing vulnerabilities in Danfoss refrigeration controllers that had been exposed to the internet for months prior to the attack.1 A scan conducted on October 6-7, 2026, identified 2,528 Danfoss StoreView dashboards online worldwide, with 1,331 located in France—representing 53 percent of the total.1 Of the French systems, 85 percent (1,136 devices) harbored known security flaws, including 527 obsolete controllers no longer receiving manufacturer support, 280 lacking a 2023 security patch, and 329 missing a 2025 patch.1 Within two days of the attack, the number of exposed French systems dropped from 1,331 to 316, a 76 percent reduction, reflecting emergency remediation efforts.1
The attack primarily targeted AK-SM 800 and AK-SC 355 Danfoss controllers and also affected refrigeration systems in Poland (157 exposed devices), the United States (85 devices), and Portugal (77 devices).1 France's cybersecurity agency CERT-FR issued recommendations including taking controllers offline, restricting access through secure VPNs where remote connectivity is necessary, updating firmware, enforcing strict security settings, and changing default passwords.1 The Paris prosecutor's office has opened an investigation, though no suspect or attack methodology has been publicly disclosed.1
评论
还没有评论，欢迎留下第一条。