US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
The U.S. government is warning of an “ongoing cyber threat” facing industrial refrigeration units, after reports of cyberattacks targeting freezers and fridges in supermarkets around the world, U.S. military bases, and at least one blood bank.
美国政府警告称，工业制冷设备正面临“持续的网络威胁”。此前有报道称，全球各地的超市、美军基地以及至少一家血库的冷冻和冷藏设备遭到了网络攻击。
U.S. cybersecurity agency CISA, the FBI, and several other federal government departments warned in a joint statement on Thursday that hackers are targeting and compromising internet-connected refrigeration and cold chain monitoring systems in grocery stores and cold storage facilities.
美国网络安全机构 CISA、联邦调查局（FBI）及其他几个联邦政府部门周四发表联合声明警告称，黑客正在瞄准并入侵杂货店和冷库设施中联网的制冷及冷链监控系统。
The statement said that the hacks are hitting critical infrastructure, such as the food, agriculture, transportation, and medicine-shipping industries. “If successfully exploited, the actors could change the temperature and possibly cause physical impacts such as fire hazards, loss of inventory and changes to the service life of the system,” the agencies warn.
声明指出，这些黑客攻击正波及食品、农业、运输和药品运输等关键基础设施行业。相关机构警告称：“如果攻击得逞，攻击者可能会改变温度，并可能导致火灾隐患、库存损失以及系统使用寿命缩短等物理影响。”
The warning comes after several waves of cyberattacks targeting industrial refrigeration units across the United Kingdom and Europe in recent weeks. Two separate waves of attacks allowed hackers to crank up the temperature on freezers and chilling units in at least a dozen countries, spoiling defrosted food and destroying produce.
此次警告发布之前，英国和欧洲在过去几周内遭遇了多轮针对工业制冷设备的网络攻击。两波独立的攻击使黑客得以调高至少十几个国家冷冻和冷藏设备的温度，导致解冻后的食物变质，农产品损毁。
Some of the affected systems included remote-controlled refrigeration units made by Danish company Danfoss, which had stopped providing security updates to its customers’ freezers. Hackers also targeted a blood bank in France, causing its refrigerated units to boost temperatures in its cold units containing donated blood supplies — but were stopped before the attack could compromise blood stores.
部分受影响的系统包括丹麦丹佛斯（Danfoss）公司生产的远程控制制冷设备，该公司此前已停止为其客户的冷冻设备提供安全更新。黑客还针对法国的一家血库发动了攻击，导致其储存捐赠血液的冷藏设备温度升高，但在攻击破坏血液储备之前被阻止。
The U.S. Department of Defense is investigating a spate of hacks targeting freezers run by the military, according to Reuters. The hacks were first reported by Signal and Silence. The U.S. has not attributed the hacks to a particular group or government, but security researchers have broadly attributed the attacks to Iran; U.S. officials also reportedly suspect Iran is the likely culprit.
据路透社报道，美国国防部正在调查一系列针对军方冷冻设备的黑客攻击。这些攻击最初由 Signal and Silence 报道。美国尚未将这些攻击归咎于特定的组织或政府，但安全研究人员普遍认为攻击来自伊朗；据报道，美国官员也怀疑伊朗是幕后黑手。
CISA, the FBI, and the Departments of Agriculture, Health and Human Services, and Transportation urged affected industries to remove remote control systems from the internet, change and strengthen passwords, apply patches where possible, and retire equipment that’s no longer supported by the vendor.
CISA、联邦调查局以及农业部、卫生与公众服务部和交通部敦促受影响行业将远程控制系统从互联网上断开，更改并加强密码，尽可能应用补丁，并淘汰供应商不再提供支持的设备。
In a separate fact sheet, the departments said that hackers may attempt to “force units into continuous heating and defrost cycles, which can cause widespread inventory loss and equipment hazards.” “Every organization that depends on refrigeration and monitoring systems should assume it could be a target,” said CISA’s acting cybersecurity chief Chris Butera.
在另一份情况说明书中，这些部门表示，黑客可能会试图“强迫设备进入持续加热和除霜循环，这可能导致大范围的库存损失和设备危险”。CISA 代理网络安全主管克里斯·布特拉（Chris Butera）表示：“每个依赖制冷和监控系统的组织都应假设自己可能成为目标。”