Meat suppliers in the UK have been hit by cyber-attacks after hackers raised the temperatures of supermarket freezers across Europe.
asserted
hackers → hit → Europe
The UK’s National Cyber Security Centre (NCSC) said it was working with the affected companies but that the national impact was minimal.
asserted
impact → say → companies
Speaking at the launch of the NCSC annual review on Tuesday, the centre’s director of operations, Paul Chichester, said: “We’re aware of those incidents in the UK, and obviously we’re working with the affected organisations.
asserted
we → speak → organisations
We’ll keep monitoring that.
asserted
We → keep → that
Cybersecurity experts meanwhile reported that attacks on “dummy” fridge controls – deliberately placed online to lure would-be hackers – displayed characteristics similar to previous malicious operations linked to Russia.
asserted
attacks → report → Russia
Retailers in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands and Sweden reported problems with their refrigeration systems on Monday – with some rising to as high as 50C (122F) – and several companies confirmed they had been hacked.
asserted
they → report → 50C
It follows similar incidents in France last month.
asserted
It → follow → France
It has emerged that the cyber-attack on French supermarket fridges involved legacy technology connected to internet with default passwords.
asserted
attack → emerge → passwords
No UK grocery chain has been directly affected so far.
asserted
chain → affect → ?
Chichester said the NCSC, part of the GCHQ spy agency, was working with organisations to identify similar loopholes in their technology and close them before hackers exploit them.
asserted
hackers → say → them
He said the NCSC was not able to comment on who might have carried out the attacks, but that they were not AI-enabled and had used vulnerabilities that had been “out there for a long period of time”.
uncertain
that → say → time
The NCSC’s chief executive, Richard Horne, said the fridge attacks represented the “foothills” of an enlarged cyberthreat that companies and the public face as AI systems highlight flaws in IT networks that owners were not aware of or neglected to patch.
asserted
owners → say → that
“There are so many vulnerabilities out there that … you could say are waiting to be exploited,” he said.
uncertain
he → be → ?
The agency’s chief technology officer, Ollie Whitehouse, said everyday domestic devices connected to the internet would be susceptible to hackers in certain situations.
asserted
devices → say → situations
He said manufacturers needed to be encouraged to make their technology safer, and consumers needed to accept paying more for safer equipment.
asserted
consumers → say → equipment
The British Association of Independent Meat Suppliers (Aims) told the BBC some of its more than 300 members had been affected, with one company’s cold units heating to up to 100C and another two reporting their units had started to defrost.
asserted
units → tell → 100C
Aims said the affected units were empty at the time and no produce was lost.
asserted
produce → say → time
Cybersecurity researchers said attacks on dummy Danfoss fridge controls – which were targeted by the hackers in mainland Europe – were similar to recent operations linked to Russia.
asserted
which → say → Russia
Xavier Bellekens, the chief executive of the cyberdefence firm Lupovis, said it had recorded 256 attempted attacks from 91 different sources between 20 October and 30 October after setting up online “honeypot” traps that are indistinguishable to attackers from real Danfoss fridge controllers.
asserted
that → say → controllers
The attackers attempting to gain control of the dummy
controls remained anonymous, but most of the authentication attempts used the manufacturer’s publicly documented factory-default username and password credentials.
asserted
most → attempt → credentials
They also used what Bellekens called “bulletproof” hosting, which means using internet service providers that are particularly tolerant of malicious activity, often ignore abuse complaints or make it difficult for authorities to disrupt their customers’ operations.
asserted
authorities → use → operations
“What caught our attention was the overlap between infrastructure involved in the recent probing activity and infrastructure we have previously associated with Russian-linked malicious operations,” he said.
“While we are not able to pinpoint a group yet, the number of actors that fit this bill is relatively small and the bulletproof hosting we have seen being used by these actors for probing was also being used by Russian groups some time ago.”
asserted
we → catch → groups
The Aporia
