Four supermarket chains in Sweden and Belgium reported on Monday that their refrigerators and freezers had been attacked and overheated, destroying millions of food items. In October, retailer Ahold Delhaize, one of the affected companies, had reported an earlier cybersecurity incident to Dutch police. That incident coincided with a cyberattack in France that caused refrigerators and freezers in hundreds of stores to reach 50°C overnight, sparking fires and spoiling food.
The incidents highlight how devices once operated mechanically can now be monitored or controlled remotely. If a household appliance connects to the internet—directly or through an app, cloud service or home network—it could, in theory, be compromised. Researchers demonstrated in 2015 that a Samsung smart refrigerator could be attacked to intercept some of the internet traffic passing through it.
Smart refrigerators, ovens and washing machines can be vulnerable, as can security cameras, video doorbells, alarm systems, smart locks, thermostats and central heating systems. Even some toothbrushes connect to the internet. However, industry security data indicates that routers account for more than three-quarters of attacks on connected devices.
After gaining access to a device, hackers may try to collect information or take control of it. A compromised camera could reveal the inside of a home, while a device with a microphone could capture sounds. An attacker controlling a thermostat or refrigerator might change its settings or switch it on or off. In more serious cases, a poorly secured device could provide a route into other systems on the same network or expose personal information linked to online accounts.
Cybersecurity researchers have also demonstrated vulnerabilities in connected vehicles. In 2015, researchers remotely took control of a moving Jeep through its internet-connected entertainment system, prompting a recall of about 1.4 million vehicles and software fixes. Years later, researchers disclosed a flaw that allowed them to track, unlock and start certain Kia vehicles using only a license plate number. They said Kia fixed the vulnerabilities within months and that there was no evidence they had been used in real attacks.
Critical infrastructure, including electricity and water networks, generally has layers of security, monitoring and regulation that consumer devices lack. That does not make it immune to cyberattacks, but it is typically harder to target than an appliance connected to a home Wi-Fi network.
Security specialists recommend changing default passwords, enabling two-factor authentication where available and installing software updates regularly. Consumers should also replace devices that no longer receive security updates, keep most devices on a local network and connect them to the internet only when there is a clear reason. Fewer connected devices mean fewer potential entry points for attackers.
Sources: Folha Mercado.