I wonder if the companies affected this time missed the news about the French attack a few weeks back?

INTPenis 7 hours ago | parent | next [-]

No joke, yes they did. The markets hit here in Sweden are all in rural communities with very low number of tech workers. They likely order their system from a supplier, that should have alerted them and helped them, but apparently did nothing.

▲

teekert 7 hours ago | parent | next [-]

But then the supplier is responsible, why would you ever put a fridge online if you are are tech noob. Someone told these people to put these fridges online, they didn't put an Ethernet cable in the back by themselves for the fun of it.

	▲	wtch98 5 hours ago \| parent \| next [-]
		The company installing the fridges did. The person who is an expert in food chain logistics bought the shiny fridges and was enamoured by the real business benefits they had of centralised monitoring and alarming of their fridges.
	▲	esseph 6 hours ago \| parent \| prev [-]
		> why would you ever put a fridge online if you are are tech noob I have some unfortunate news for you. There's a lot of scary shit online.

▲

Caloric3002Swed 7 hours ago | parent | prev | next [-]

>The markets hit here in Sweden are all in rural communities with very low number of tech workers.

Hej! You are wrong, here in the middle of Stockholm got hit.

https://www.mitti.se/nyheter/icabutikens-frysar-hackades--fi...

ICA Baronen on Odengatan is one of several stores in Sweden that have suffered a major hacker attack. On Monday, their freezers were cancelled at 50 degrees.

This is in Stockholm - https://maps.app.goo.gl/BwbDST4dPVkjcdgA8

So no lack of IT workers/tech workers... Nor is it very rural.

>They likely order their system from a supplier, that should have alerted them and helped them, but apparently did nothing.

The first thing to do when you get access to these as a hacker? You disable the alarms...!

Now, the supplier should have set them up correctly over VPN, good passwords, Zero Trust etc but these an OT/SCADA are usually just open to the internet due to the simplicity of use.

	▲	raverbashing 7 hours ago \| parent [-]
		Hence why you need an alarm for alarm disablement (I mean, you need also a bunch of other things but yes)

▲

sorenjan 7 hours ago | parent | prev [-]

Some of them (Coop) got new equipment after what happened in France and where gonna upgrade them in two days.

▲

Caloric3002Swed 7 hours ago | parent | prev | next [-]

Imagine they where internet exposed due to simplicity. It will take longer than three weeks to set this up. Not for you but imagine you are a store owner with 0 IT knowledge.

The issue is this needs to be handled centrally by the parent org also. They have IT of course but they usually do POS and desktops/servers.

The OT/SCADA systems are usually totally separate and not touched by the white collar IT systems.

	▲	Autious 7 hours ago \| parent \| next [-]
		ICA is franchised, so stores are owned and run by operators. The central company offers some services, but a lot of the decisions comes down to the individual stores.
	▲	cryptonym 6 hours ago \| parent \| prev [-]
		Imagine developing a control system for a professional freezer and designing it so it can be directly exposed to internet due to "simplicity". Want something simple? Don't connect it.

▲

tgv 7 hours ago | parent | prev | next [-]

The bizarre thing is it is the second time for Delhaize, although the incident of two weeks ago was related to the pricing system.

▲

Hamuko 7 hours ago | parent | prev [-]

After the PHP vulnerability, we got some clients asking if our SaaS product used PHP (it didn't). It's possible that they just contacted their vendor, who assured them that everything was fine.