Very cold war: Who’s attacking Europe’s supermarket freezers? 

Supermarket refrigerators and freezers across Europe have been targeted by a cyberattack that raised the temperature of internet-linked units, destroying and damaging large quantities of food.

On Monday, fridges and freezers at more than 100 shops in several European countries ran hot. Cyberattacks on supermarkets began last month, when hundreds of French supermarkets were left with spoiled food and damage to units which had overheated, costing millions of euros.

So far, it remains unclear why hackers targeted the supermarkets, but attacks have spread across the continent and even to the United States.

Here’s what we know:

Which countries in Europe have been targeted?

On Monday, several supermarkets in Europe were affected, including the following:

• Dutch supermarket operator Delhaize said dozens of its shops in Belgium and Luxembourg were hit by an “IT incident”.
• French retailer Carrefour said about 15 of its 700 Belgian locations were hit by refrigeration problems.
• The Colruyt group, which runs Spar stores in Belgium as franchises, said five of its shops were affected.
• Swedish Coop said cooling systems at seven of its 800 stores were affected, with disruptions ranging from complete shutdowns to partial operation.
• Swedish furniture retailer IKEA, which also operates restaurants at its stores, said one site in Mons, Belgium, had been affected by a cyberattack.
• De Laet & Van Haver, the Belgian butchery chain, said the temperature in its fridges at its store in Hove, south of Antwerp, was raised as high as 18 degrees Celsius, ruining meat worth about 15,000 euros ($16,764).
• The food wholesaler Musgrave said a cyber-incident affected refrigeration systems in 13 of its SuperValu stores in Ireland.
• In October, hundreds of French supermarkets suffered cyberattacks, spoiling tonnes of food, causing fires and melting parts of refrigeration units.

What has happened in the US?

In August, freezers at a market in Fort Huachuca, an Army base in Arizona, went into defrost mode, spoiling all the frozen food they contained, according to a post on Facebook by the base.

The same month, the naval station in Newport, Rhode Island, reported on Facebook that its refrigeration system was affected, leaving only dry goods were available for purchase.

The Pentagon considered the freezer malfunctions on the military bases to be a suspected hack, the Reuters news agency reported late last month, citing four officials close to the matter.

One official said Pentagon investigators were communicating with the French authorities about the issue.

How are cyberattackers targeting fridges and freezers?

Hackers can access the controls of fridges and freezers which use internet software and raise their temperature in order to spoil frozen food.

In some cases, hackers have increased the temperature of appliances to as high as 50C (122F) in European supermarkets, causing them to melt or even catch fire.

Awais Rashid, a professor of cybersecurity at the University of Bristol in the UK, explained that many supermarket refrigeration systems which are remotely managed and, often by third parties, have not been given necessary software updates to prevent hackers.

“In line with established cyber security practices, these systems should be managed via secure networks. However, this is not the case in these incidents and they are accessible on the Internet,” Rashid told Al Jazeera.

“A remote managing party can access a web server on the controller to configure the system including temperature changes and maintenance. There are known vulnerabilities in several controllers (many of which are past their end of life),” he said.

Rashid added that vulnerabilities include “easily guessable” passwords, which would mean anyone could gain access.

Why are hackers doing this?

The motive behind the attacks is unclear, but authorities believe it may be a deliberate attempt to disrupt food supplies.

On Monday, the European Commissioner for Agriculture and Food, Christophe Hansen, said the attacks on fridges were a “deliberate attempt to disrupt” the bloc’s food supply and to undermine consumer confidence.

He added that while “food security is not currently at risk … the food waste and impact on businesses are real”.

Rashid said that while there are few details about who may be behind the attacks or what their motives are, it is likely that these are “the motive here is likely disruption”.

“This has financial impacts on the supermarkets but also societal impacts in terms of security of the food supply chain. Critically, this risks undermining trust in infrastructures on which people rely daily,” he said.

Who is behind the attacks?

On Monday, Belgium’s prosecutor’s office announced that it had opened a criminal investigation into the latest fridge cyberattacks. But so far, no one has taken responsibility.

Theories have emerged linking state actors to cyberattacks generally, with North Korea most recently accused of being behind last week’s $6.3bn Binance cryptocurrency heist, which forced the crypto group to freeze accounts.

European intelligence officials have also warned that Russia is escalating its shadow war on the continent amid the ongoing conflict with Ukraine, with cyberattacks among the methods it uses.

On Tuesday, the UK’s National Cyber Security Centre warned that Britain needs to be prepared for an artificial intelligence (AI)-powered cyberattack on its critical national infrastructure within the next two years.

“By 2028, it is highly likely that Russia, China and other nation states will routinely use AI-cyber to achieve their geopolitical goals, with the UK facing an increase in scale and speed of sophisticated cyberattacks,” the NCSC said in a report.

The report comes shortly after the UK launched its “Be Ready” campaign, calling on citizens to stockpile enough tinned food, bottled water and cash to last three days in the event of a cyberattack or national emergency.

Rashid said that as our infrastructure becomes increasingly digitised, the risk of disruption from cyberattacks, especially “cyber-physical infrastructures such as refrigeration systems”, has risen.

“However, we should also note that a lot of our digital infrastructures operate safely everyday because good security practices enable that. The world works because cyber security works effectively. So it is important that all businesses follow good cyber security practices,” he said.