欧洲多国数十家商店遭遇网络攻击，冰箱受影响作者：Shiona McCallum欧洲各地的超市遭遇疑似网络攻击，其冰箱和冰柜受到影响，这引发了人们对联网硬件漏洞的担忧，从工业机械到普通家用电器均在其中。
Dozens of shops across European countries have been hit by a cyber-attack affecting their fridges. By Shiona McCallum Supermarkets across Europe have been hit by a suspected cyber-attack affecting their fridges and freezers, and raising concern about the vulnerabilities of internet-connected hardware from industrial machinery to humble domestic appliances.
连接互联网的智能设备可以包括冰箱、中央供暖系统，甚至洗衣机。
Smart devices which are connected to the internet can include fridges, central heating, and even washing machines.
虽然这使得远程控制这些设备变得更容易，但理论上，任何联网设备都可能被恶意行为者利用。
And while that makes them easier to control remotely, in theory, any device which goes online can potentially be exploited by malicious actors.
然而，这并不意味着黑客能轻易控制这些设备，大品牌通常会竭尽全力确保其技术的安全性。
However, that doesn't mean hackers can easily take control of it, and big brands generally go to great lengths to make sure their tech is secure.
此前曾在一些设备中发现漏洞。2015年，研究人员演示了三星智能冰箱中的一个漏洞如何允许他们拦截互联网流量。
Exploits have been found before in some devices. In 2015, researchers demonstrated how a vulnerability in a Samsung smart fridge could allow them to intercept internet traffic.
但没有证据表明，在11月针对超市的网络攻击中，家用电器成为了攻击目标。
But there's no evidence domestic appliances are being targeted in the cyber-attacks which targeted supermarkets in November.
英国国家网络安全中心（NCSC）前首席执行官Ciaran Martin表示，制造商需要做更多工作，使联网设备更安全。
Ciaran Martin, former chief executive of the UK's National Cyber Security Centre (NCSC) says manufacturers needed to do more to make connected devices secure.
他说：“我们需要对大型科技公司提出更多要求，让它们在第一时间就为我们提供更安全的设备和产品。”他建议消费者保持设备更新，并在可能的情况下启用多因素认证。他说：“我知道这很麻烦，但只需要几秒钟。”
"There's a lot more that we need to demand of big tech to give us safer devices and products in the first place," he said. He advised consumers to keep devices updated and enable multi-factor authentication wherever possible. "I know it's a pain, but it only takes a few seconds," he said.
自2024年4月起，英国法律要求特定消费类智能设备的制造商满足最低网络安全标准，包括关于密码和安全更新的要求。
Since April 2024, UK law has required manufacturers of certain consumer smart devices to meet minimum cyber security standards, including requirements around passwords and security updates.
英国国家网络安全中心表示，正在与国际合作伙伴和业界合作，以了解超市发生的事件，但目前不知情英国受到任何影响。
The NCSC said it was working with international partners and industry to understand the supermarket incidents, but it was unaware of any impact on the UK.
然而，英国网络防御（UK Cyber Defence）的研究人员发现，与英国零售商相关的800多个制冷和楼宇控制接口可通过公共互联网访问。
However, researchers from UK Cyber Defence have identified more than 800 refrigeration and building-control interfaces associated with British retailers that can be accessed over the public internet.
这并不一定意味着它们会被黑客攻破，但可能会使其暴露于攻击者利用弱密码或软件漏洞的风险之下。
That doesn't necessarily mean they can be hacked, but it could leave them exposed to attackers exploiting weak passwords or software vulnerabilities.
政府已经就网络韧性问题与高层食品零售商举行了会谈，此前超市曾遭遇攻击。
The government has already held talks with senior food retailers about cyber resilience, following earlier attacks on supermarkets.
英国零售联盟（British Retail Consortium）首席执行官海伦·迪金森（Helen Dickinson）表示，网络事件是零售商的一大担忧，企业正与国家网络安全中心（NCSC）合作，共享情报并加强防御。这并非黑客攻击首次引发对食品供应影响的担忧。
Helen Dickinson, chief executive of the British Retail Consortium, has said cyber incidents are a major concern for retailers, with businesses working alongside the NCSC to share intelligence and strengthen their defences. It would not be the first time that hacks have raised concern about impact on food supply.
2025年5月，英国超市马克斯·斯宾塞（M&S）和合作社（the Co-op）遭勒索软件黑客攻击，零售商难以用新鲜货源补货货架。袭击发生后的几天里，英国各地顾客纷纷抱怨货架空空如也。
When UK supermarkets M&S and the Co-op were targeted by ransomware hackers in May 2025, the retailers struggled to stock some shop shelves with fresh deliveries. Customers across the UK complained of empty shelves in the days following the attack.
网络安全公司SentinelOne的研究员汤姆·黑格尔（Tom Hegel）表示，零售商必须明确责任归属。
Tom Hegel, a researcher at cyber-security firm SentinelOne, said retailers must be clearer about responsibility.
“零售商需要回答的问题是：谁拥有这些设备的安全所有权，而不仅仅是谁负责维修，”他说。
"The question retailers need to answer is who owns the security of that equipment, not just who repairs it," he said.
他表示，互联网连接让日常技术更便捷，但安全防护必须跟上步伐。
He said internet connectivity can make everyday technology more convenient, but security needed to keep pace.
“一旦攻击者能够操控这些控制装置，除霜等合法功能就会成为破坏工具，”他说。
"Once an attacker can operate those controls, legitimate functions such as defrosting become tools for disruption," he said.
“更改一个设置就能毁坏实体库存，而不仅仅是中断计算机系统。” 汽车、发电厂和供水系统会脆弱吗？在家庭之外，联网技术被用于远程管理工业机械和车辆。
"Changing a setting can destroy physical stock, not just interrupt a computer system." Could cars, power plants and water supplies be vulnerable? Outside of the home, connected tech is used to remotely manage industrial machinery and vehicles.
网络安全专家肯·芒罗（Ken Munro）指出，2015年研究人员曾演示通过联网娱乐系统远程黑入一辆吉普车（Jeep），这促使车辆安全得到改进。“幸运的是，汽车行业意识到了这一点并修复了问题，”他说。
Cyber security expert Ken Munro pointed to a 2015 demonstration in which researchers remotely hacked a Jeep through its internet-connected entertainment system, prompting improvements in vehicle security. "Fortunately, the vehicle industry woke up to this and fixed the problem," he said.
移动连接也被广泛用于监控发电厂和水网中的设备，使工程师能够远程管理系统。
Mobile connections are also widely used to monitor equipment in power plants and water networks, allowing engineers to manage systems remotely.
芒罗表示，英国公用事业公司在保护这些连接方面总体上做得很好，但世界各地的标准各不相同。
Munro said UK utilities were generally good at securing these connections, but standards varied around the world.
他最大的担忧是规模较小、资金不足的公用事业公司，它们可能仍在依赖老旧、脆弱的设备。
His biggest concern was smaller, poorly funded utility companies which may still be relying on older, vulnerable equipment.
网络安全专家奥利维耶·达卢瓦表示，如果没有适当的防护，连接到互联网的“任何工厂或设备”——从汽车制造商到电力或交通基础设施——都可能面临类似的风险。
Without proper protections, "any factory or equipment" connected to the internet - ranging from carmakers to electricity or transport infrastructure - could face similar risks, said Olivier Daloy, a cybersecurity expert at Zscaler.
