upvote

points

by puszczyk8 hours ago |
comments
upvoteby INTPenis8 hours ago|
next
[-]
No joke, yes they did. The markets hit here in Sweden are all in rural communities with very low number of tech workers. They likely order their system from a supplier, that should have alerted them and helped them, but apparently did nothing.
reply
upvoteby teekert8 hours ago|
parent|
next
[-]
But then the supplier is responsible, why would you ever put a fridge online if you are are tech noob. Someone told these people to put these fridges online, they didn't put an Ethernet cable in the back by themselves for the fun of it.
reply
upvoteby wtch986 hours ago|
parent|
next
[-]
The company installing the fridges did. The person who is an expert in food chain logistics bought the shiny fridges and was enamoured by the real business benefits they had of centralised monitoring and alarming of their fridges.
reply
upvoteby esseph7 hours ago|
parent|
prev|
[-]
> why would you ever put a fridge online if you are are tech noob

I have some unfortunate news for you.

There's a lot of scary shit online.

reply
upvoteby Caloric3002Swed8 hours ago|
parent|
prev|
next
[-]
>The markets hit here in Sweden are all in rural communities with very low number of tech workers.

Hej! You are wrong, here in the middle of Stockholm got hit.

https://www.mitti.se/nyheter/icabutikens-frysar-hackades--fi...

ICA Baronen on Odengatan is one of several stores in Sweden that have suffered a major hacker attack. On Monday, their freezers were cancelled at 50 degrees.

This is in Stockholm - https://maps.app.goo.gl/BwbDST4dPVkjcdgA8

So no lack of IT workers/tech workers... Nor is it very rural.

>They likely order their system from a supplier, that should have alerted them and helped them, but apparently did nothing.

The first thing to do when you get access to these as a hacker? You disable the alarms...!

Now, the supplier should have set them up correctly over VPN, good passwords, Zero Trust etc but these an OT/SCADA are usually just open to the internet due to the simplicity of use.

reply
upvoteby raverbashing7 hours ago|
parent|
[-]
Hence why you need an alarm for alarm disablement

(I mean, you need also a bunch of other things but yes)

reply
upvoteby sorenjan7 hours ago|
parent|
prev|
[-]
Some of them (Coop) got new equipment after what happened in France and where gonna upgrade them in two days.
reply
upvoteby Caloric3002Swed8 hours ago|
prev|
next
[-]
Imagine they where internet exposed due to simplicity. It will take longer than three weeks to set this up. Not for you but imagine you are a store owner with 0 IT knowledge.

The issue is this needs to be handled centrally by the parent org also. They have IT of course but they usually do POS and desktops/servers.

The OT/SCADA systems are usually totally separate and not touched by the white collar IT systems.

reply
upvoteby Autious8 hours ago|
parent|
next
[-]
ICA is franchised, so stores are owned and run by operators. The central company offers some services, but a lot of the decisions comes down to the individual stores.
reply
upvoteby cryptonym6 hours ago|
parent|
prev|
[-]
Imagine developing a control system for a professional freezer and designing it so it can be directly exposed to internet due to "simplicity".

Want something simple? Don't connect it.

reply
upvoteby tgv8 hours ago|
prev|
next
[-]
The bizarre thing is it is the second time for Delhaize, although the incident of two weeks ago was related to the pricing system.
reply
upvoteby Hamuko7 hours ago|
prev|
[-]
After the PHP vulnerability, we got some clients asking if our SaaS product used PHP (it didn't). It's possible that they just contacted their vendor, who assured them that everything was fine.
reply