Cyberattack Disrupts Supermarket Refrigeration Systems, Raising Concerns Over Smart Home Security
Dublin: Musgrave, the operator of 13 SuperValu supermarkets in Ireland, has confirmed that its refrigeration systems were affected by a cyberattack. As a precautionary measure, refrigerated and frozen products have been removed from sale at the affected stores.
Meanwhile, Ahold Delhaize has reported problems with refrigeration and freezer systems at several supermarkets in Belgium and Luxembourg following an IT failure. The malfunction caused temperatures in the cooling systems to rise, prompting an investigation into the incident.
The developments have renewed concerns about the growing cybersecurity risks associated with internet-connected devices and remotely controlled systems.
Last October, police in the Netherlands investigated a cybersecurity breach, while a cyberattack affecting hundreds of supermarkets in France reportedly caused refrigeration temperatures to rise to 50°C. The incidents resulted in food spoilage and fires.
The increasing ability to monitor and control refrigerators, heating systems, security cameras and alarm systems through the internet has created new opportunities for cybercriminals.
Cybersecurity experts warn that household devices, including smart refrigerators, televisions and security cameras, can also become targets for hackers.
Could cybercriminals target refrigerators in our homes?
Experts say that domestic refrigerators are theoretically vulnerable to cyberattacks, particularly when they are connected to the internet through mobile applications, cloud services or home networks.
At a hacking conference in Las Vegas in 2015, researchers demonstrated a security vulnerability in a Samsung smart refrigerator. They showed that certain internet data transmitted through the device could potentially be intercepted.
However, the objectives of cybercriminals often extend beyond damaging or taking control of individual appliances. They may seek to steal personal information, disrupt services or use compromised devices as entry points into wider networks.
Household appliances can become security risks
Cybercriminals primarily target devices that are connected to the internet and can be accessed or controlled remotely.
These include security cameras, video doorbells, alarm systems, smart locks, heating controls, refrigerators, ovens, washing machines and other connected household appliances. Even relatively ordinary products, such as electric toothbrushes, can have internet connectivity.
However, cybersecurity research indicates that home routers account for more than three-quarters of attacks targeting internet-connected devices, highlighting the importance of securing the central connection within a household network.
What can hackers do after compromising a device?
Once a device has been compromised, hackers may be able to collect information, interfere with its operation or use it to access other connected systems.
For example, compromised security cameras could allow criminals to monitor activity inside a home. Devices equipped with microphones may potentially be exploited to capture private conversations, while an insecure router could expose information travelling across the home network.
Depending on the device and the vulnerability involved, attackers may also be able to switch appliances on or off, alter settings, interfere with account access or disrupt the temperature controls of refrigerators and freezers.
A compromised device can also provide a route into other equipment connected to the same network, potentially increasing the scale of an attack.
Connected vehicles are also vulnerable
Cybersecurity researchers have identified vulnerabilities in internet-connected vehicles as well.
In 2015, researchers demonstrated that they could remotely interfere with a moving Jeep by exploiting a vulnerability in its entertainment system. The incident led to the recall of approximately 1.4 million vehicles and subsequent software security improvements.
In another case, researchers identified a vulnerability affecting certain Kia vehicles that could potentially allow someone to locate, unlock and start a car using only its registration number. The manufacturer addressed the security issue after it was reported.
Researchers have said there is no evidence that these particular vulnerabilities were exploited in real-world attacks.
Critical infrastructure, including electricity and water supply networks, generally benefits from multiple layers of cybersecurity protection. This makes such systems more difficult to attack than many ordinary household devices, although they are not entirely immune to cyber threats.
One of the simplest ways to reduce the risk is to limit the number of devices connected to the internet. Every connected device can potentially create another entry point for attackers.
Steps to protect internet-connected household appliances
Cybersecurity experts recommend several precautions to improve the security of smart home devices:
-
Change default passwords: Replace factory-installed passwords with strong, unique passwords that are difficult to guess.
-
Enable two-factor authentication: Activate two-step verification wherever the device or associated account supports it.
-
Install software updates: Regularly update device software and firmware to address known security vulnerabilities.
-
Replace unsupported devices: Consider replacing older appliances that no longer receive security updates from their manufacturers.
-
Avoid unnecessary internet connections: Do not connect household appliances to the internet unless their online features are genuinely needed.
-
Restrict network access: Where possible, configure devices to operate only on a local network and limit their access to external services.
Irish Samachar English News