They weren't even protected with a wireguard tunnel? 🤔
post
These are on the internet for things like cold chain auditing (consumer protection/health inspection stuff) and dynamic power grid balancing (as in, sun is shining extra hard today, so set all the grocery fridges a couple degrees lower temporarily to act as a solar battery). I.e., for good reasons that we like. Grocery fridges amount to something like 1% of all the energy used in any given country, so this isn’t nothing.
There haven’t been many details about these attacks other than the "password of the day" backdoor, and it’s reasonably likely that these were only visible on an intranet that was breached by hacking someone’s laptop or something.
The real problem is that they’re still using the firmware with the manufacturer backdoor. That’s crazy.
The real problem is that they’re still using the firmware with the manufacturer backdoor. That’s crazy.
This is what keeps me up at night 😭
I understand the web access on these devices is to allow remote access by technicians. It should be only enabled when actively needed but that's a lot to ask apparently.
Stop connecting basic thermostats to the web. Holy crap they worked fine before.
From what I understand, there are SOME reasons to have industrial freezers online, so they can be centrally monitored for maintenance issues or try and maximize efficiency by adjusting setting remotely or whatnot.
But, you'd think they could have a fucking airplane mode where they could just run as fucking freezers.
I get there are SOME practical reasons to have industrial freezers hooked up to wifi.
But, you'd think they could have like, an offline mode, where they just work like normal freezers.
What's funny is everyone's like, "Why are fridges on the internet‽" Wait till y'all find out about scada. 
Shhhh! Don't let people know you can connect it to the internet!
A good chunk of SCADA attacks have involved access to the hardware but there have been more and more notable remote attacks too.

Why the fuck can someone do a cyber attack on freezers wtf
Why would you connect the fridges to the internet! Just don’t do that! You’ve created a vulnerability that just didn’t need to exist!
all 16 comments