国安部警示：黑客攻击法国超市制冷系统致生鲜变质

中国国家安全部发布警示，指出近期黑客对法国境内数百家大型连锁超市的制冷控制系统实施了网络攻击 1。据报道，攻击者通过扫描暴露在公网上的温控设备，利用漏洞获取权限并发送指令 1。具体而言，攻击者强制将温度设定为50℃进行除霜，导致大量生鲜及冷冻产品变质，造成的经济损失或达数百万欧元 1。

该事件凸显了接入互联网的工业控制系统（ICS）面临的严重安全风险 1。此类风险可能波及电力、供水、油气、交通、医疗、食品等关键基础设施领域，引发物资损毁、基础设施瘫痪及连锁危害 1。针对此类攻击，国安部建议采取多项防范措施，包括选用安全固件、定期排查漏洞、建立设备台账、强化密码设置以及最小化对外暴露端口 1。此外，相关部门还应审慎开放远程控制功能，以降低被攻击的风险 1。

The Ministry of State Security (MSS) of China has issued a warning regarding recent cyberattacks targeting the refrigeration control systems of hundreds of large supermarket chains in France 1. The attacks, orchestrated by hackers, involved scanning temperature control devices exposed to the public internet and exploiting vulnerabilities to gain unauthorized access 1. Once inside the systems, the attackers sent commands to forcibly initiate defrost cycles and set temperatures to 50°C, resulting in the spoilage of fresh and frozen goods 1. Preliminary estimates suggest the financial losses from these incidents could reach several million euros 1.

This incident highlights the severe security risks facing Industrial Control Systems (ICS) that are connected to the internet, particularly within critical infrastructure sectors such as electricity, water supply, oil and gas, transportation, healthcare, and food 1. To mitigate similar threats, the MSS recommends adopting secure firmware, conducting regular vulnerability assessments, maintaining comprehensive device inventories, enforcing strong password policies, and minimizing the exposure of remote control ports 1.