Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

The cyberattack thatdisrupted refrigerationat hundreds of French supermarkets this week also affected equipment from Copeland and its Dixell brand, according to France’s national cybersecurity agency ANSSI.

ANSSI’s CERT-FR first warned on October 12 of numerous compromises involving Danfoss AK-SM and AK-SC series refrigeration controllers. A day later, the agency updated its alert to include Copeland XWEB and Dixell XWEB systems.

Copeland initially declined to confirm the agency’s findings. It has since acknowledged a vulnerability. “We are currently working with impacted customers to mitigate the risk,” the company said.

This summer, Claroty detailed flaws in Danfoss’s AK-SM 800A, along with 23 vulnerabilities in Copeland’s XWEB Pro controller. Copeland patched them in a firmware update.

It is still unclear how the attackers gained access. The CERT-FR alert does not link the compromises to any specific vulnerability, and neither Danfoss nor French authorities have tied the attack to the flaws...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE