The Cold Chain on Fire: Unpatched Danfoss controllers exploited
Between October and November 2026, hundreds of supermarkets across France and over a dozen European countries suffered cyberattacks targeting unpatched Danfoss refrigeration controllers directly exposed to the internet. Attackers modified temperature settings and defrost cycles, causing food spoilage worth tens of millions of euros. The exploitation leveraged outdated firmware vulnerabilities, including authentication bypass flaws, without requiring sophisticated code execution capabilities. French authorities attributed the operations to Iran's Islamic Revolutionary Guard Corps unit "Shahid Kaveh," linked to CyberAveng3rs, known for previous attacks on U.S. critical infrastructure. The incidents demonstrate how exposed industrial control systems enable disruptive attacks and how generative AI can accelerate exploit development for ICS devices.
Pulse ID: 6af330c6ae77e9cab69b34fc
Pulse Link: https://otx.alienvault.com/pulse/6af330c6ae77e9cab69b34fc
Pulse Author: AlienVault
Created: 2026-11-10 14:57:10
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberAttacks #France #ICS #IndustrialControlSystems #OTX #AlienVault