KR — 전자신문
Government Warns of Refrigeration Equipment Hacking, Urges Private Sector Security Checks
Security1 min read
South Korea's government has warned businesses that hackers are attacking refrigerators and freezers in stores and cold storage. It has asked private companies to check their security now.
What happened
Around the world, hackers have caused food to spoil by taking control of cold-storage equipment. In Korea, the Ministry of Science and ICT shared overseas cases with private companies and industry groups. It also asked them to run security checks. The attacks target remote control devices that can change a machine's temperature and run time from outside the store or warehouse.
Key facts
- In France, an attacker changed the defrost time from 1 hour to 8 hours, so temperature alarms rang late.
- In some large supermarkets, fridge temperatures rose as high as 50 degrees Celsius.
- Supermarkets in Sweden and Belgium, and three plasma storage sites of the French blood service, also reported damage this month.
- In the United States, food spoiled in a freezer at a military base store, and the Department of Defense is checking whether hacking was the cause.
- The Ministry says no damage cases have been reported in Korea so far.
How the attacks work
Cooling units often freeze up with frost. A 'defrost' function melts that ice on a set schedule. Attackers abused this function to stop cooling from being noticed. Experts also say that sealed-off devices are less safe when their factory passwords are left unchanged.
Why it matters
Fresh food can be thrown away even when there is plenty of it, if it is not kept at the right temperature during storage and shipping. If one cold warehouse that supplies many stores is hit, food supply in a whole region could be disrupted. This makes the attacks a food security issue, not just a computer problem.
What to watch
- Whether companies change factory passwords and update device firmware, which is the control software inside equipment.
- Whether remote access is limited to protected networks such as a virtual private network (VPN).
- What the U.S. Department of Defense finds about the military base freezer failure.
Glossary
- Ministry of Science and ICT
- South Korea's government office that handles science, technology, and information and communication policy.