FBI and CISA warn that refrigeration controllers are being targeted

The FBI and CISA published a joint advisory warning that attackers are going after electronic temperature controllers and commercial refrigeration management systems in retail grocery and cold storage facilities. HHS, USDA and DOT signed on. The advisory went out on Thursday, and BleepingComputer reported it on November 5.

The agencies describe the pattern as exploiting authentication bypass bugs, arbitrary code injection flaws or weak configurations to change temperature settings and push equipment into continuous heating or defrost cycles. The stated consequences are spoiled stock, shortened equipment life, fire risk and unsafe storage conditions. Attackers can also blunt temperature visibility, so staff don't notice something is wrong.

The warning follows a run of incidents in Europe. In October, controllers at an estimated 250 to 350 French supermarkets were compromised and defrost functions were switched on remotely. A second wave in November hit more than 115 stores across six European countries, with some systems shutting down and others reaching 50°C. On November 3, the French Blood Establishment said an incident at a refrigeration equipment provider had altered temperature and defrost settings at three facilities storing blood products.

The advisory doesn't name the actors or say how many devices are exposed. Recommended steps: take controllers off the public internet, secure remote access that's actually needed, change default passwords, apply available updates, separate OT from business networks, and set safe temperature limits. We'd start with an inventory of what's reachable from outside, because that's the part you can check today.