The United States has issued a warning about a persistent cyber threat targeting cooling systems in various sectors. The threat, which is believed to be ongoing, involves malicious cyber actors targeting vulnerabilities in internet-connected temperature control and cooling devices. These devices are commonly used in grocery stores, warehouses, and other facilities that rely on refrigeration.
According to a joint statement released by the FBI, the Cybersecurity and Infrastructure Security Agency, and several US government departments, the cyber threat has the potential to cause significant disruptions to critical infrastructure. If successful, the attackers could change temperatures and potentially cause physical effects such as fire hazards, inventory loss, and changes to the shelf life of products.
The warning comes after a series of cyber attacks targeting cooling systems in the US and Europe. In recent months, refrigerators and coolers in several companies have been hit by at least three waves of cyber attacks. The US Department of Defense is currently investigating a series of unexplained outages affecting cooling units in military bases, which are being treated as potential cyber attacks.
Chris Pootera, Acting Deputy Director for Cybersecurity at the Cybersecurity and Infrastructure Security Agency, emphasized that institutions relying on cooling and monitoring systems should assume they are potential targets. The government is urging operators of cooling control systems across various sectors to take precautions to protect themselves from cyber threats.
To mitigate the risk, the government recommends that operators disconnect their devices from the public internet, isolate them from company networks, and apply software updates immediately. These measures are aimed at preventing malicious cyber actors from exploiting vulnerabilities in cooling systems.
The recent cyber attacks on cooling systems have raised concerns about the potential for malicious actors to remotely manipulate critical devices. A wave of cyber attacks on French cooling systems last month caused an estimated tens of millions of euros in damages, while a second wave of attacks affected over 100 stores across Europe.
The US warning highlights the need for institutions to be proactive in protecting themselves from cyber threats. By taking steps to secure their cooling systems, companies can reduce the risk of disruption and protect their operations.
Key points
- The US has warned of an ongoing cyber threat targeting cooling systems across various sectors.
- The threat involves malicious cyber actors targeting vulnerabilities in internet-connected temperature control and cooling devices.
- Institutions are urged to assume they are potential targets and take precautions to protect themselves from cyber threats.
