Hackers reportedly changed temperature settings on refrigeration equipment used by the French Blood Establishment, EFS, from around −30°C to 110°C after targeting its cooling service provider, Coolworld.
Russian hackers or even Russia as a country could be behind it, but also, as security on these devices is apparently an afterthought at best, it could be Lars from Stockholm or Marie from some small french village.
But it doesn’t really matter. The real question is that who the fuck connected these things to the public internet in the first place. Also one should ask why these were still on the internet even if every news outlet covered the previous attacks and why management didn’t bother to get off their arse and at least ask from some IT person if their fundamentally unsecure things are still connected.
The real question is that who the fuck connected these things to the public internet in the first place.
Honestly, I didn’t care when a few supermarkets got hit by their own stupidity. That our blood conserves are handled with the same care as fucking frozen shrimps is just horrifying.
The recent attack in Sweden, was small supermarket stores - Which doesn’t have the resources/knowledge to fix their issue. Given ICA is a franchise model, the main IP holder should however extend this knowledge to all of their franchise takers imo
Of course they do. They need networking for payment processing, orders, finance tracking, surveillance camers and all the other stuff and they hired someone to set up those as well. Sure, they don’t have dedicated IT person in house, but they don’t have plumber or electrician either.
I think putting all the blame on the lax security isn’t okay. There are shitty people doing shitty things, and they should be punished for it. And the people who are implementing lax security should also be punished.
Oh, yeah, obviously. Causing financial or other harm just for the kicks of it should absolutely be punished. But specially in this case where there’s medical stuff around the real question isn’t really who ‘hacked’ in with a default password or something trivial but how the management can be so incompetent that they let this happen. All kinds of security breaches happen every day, but rarely on this scale and especially not after the known ‘exploit’ has been all around the news for days.
Compare this to the chaos everyone had just a while ago with PHP. Everyone patched systems, kept their services down until fixes were available and so on. This should’ve caused similar effect, but apparently people in charge were just ‘meh’ and left the doors unlocked anyways.
Atrributing this kind of damage on systems that are plainly evident on shodan with a well known secret to state sponsored malicious actors is giving them way too much credit. This could be a 10 year old with a shell script and VPN.
When it comes out that all these networks are deeply compromised as a result of easy lateral movement from the freezer to the domain controller, then I’ll agree it’s possibly state sponsored.
Ok. Maybe all that is true, but also this is not a thing that should be possible and blaming other people for your utter lack of care or planning is not really something you get to do.
Modern warfare. Russia is probably behind it. They recently did the same to supermarket freezers in Sweden
wasnt it france a few weeks ago.
I think the question is rather: why the fuck would you connect these things to the internet?
There we go. Why is this possible at all, in any sense
Russian hackers or even Russia as a country could be behind it, but also, as security on these devices is apparently an afterthought at best, it could be Lars from Stockholm or Marie from some small french village.
But it doesn’t really matter. The real question is that who the fuck connected these things to the public internet in the first place. Also one should ask why these were still on the internet even if every news outlet covered the previous attacks and why management didn’t bother to get off their arse and at least ask from some IT person if their fundamentally unsecure things are still connected.
Honestly, I didn’t care when a few supermarkets got hit by their own stupidity. That our blood conserves are handled with the same care as fucking frozen shrimps is just horrifying.
The recent attack in Sweden, was small supermarket stores - Which doesn’t have the resources/knowledge to fix their issue. Given ICA is a franchise model, the main IP holder should however extend this knowledge to all of their franchise takers imo
Of course they do. They need networking for payment processing, orders, finance tracking, surveillance camers and all the other stuff and they hired someone to set up those as well. Sure, they don’t have dedicated IT person in house, but they don’t have plumber or electrician either.
I think putting all the blame on the lax security isn’t okay. There are shitty people doing shitty things, and they should be punished for it. And the people who are implementing lax security should also be punished.
Oh, yeah, obviously. Causing financial or other harm just for the kicks of it should absolutely be punished. But specially in this case where there’s medical stuff around the real question isn’t really who ‘hacked’ in with a default password or something trivial but how the management can be so incompetent that they let this happen. All kinds of security breaches happen every day, but rarely on this scale and especially not after the known ‘exploit’ has been all around the news for days.
Compare this to the chaos everyone had just a while ago with PHP. Everyone patched systems, kept their services down until fixes were available and so on. This should’ve caused similar effect, but apparently people in charge were just ‘meh’ and left the doors unlocked anyways.
Atrributing this kind of damage on systems that are plainly evident on shodan with a well known secret to state sponsored malicious actors is giving them way too much credit. This could be a 10 year old with a shell script and VPN.
When it comes out that all these networks are deeply compromised as a result of easy lateral movement from the freezer to the domain controller, then I’ll agree it’s possibly state sponsored.
Putin’s Razor: Never attribute to self-own that which could easily be blamed on Russia.
Next it’ll be fridges falling out of windows by accident.
Ok. Maybe all that is true, but also this is not a thing that should be possible and blaming other people for your utter lack of care or planning is not really something you get to do.