字号·· | 护眼
theregister

法国血浆储存设施遭网络攻击,令人怒火中烧Cyberattack on French plasma stores is enough to make your blood boil

点「原文对照」整页切到原文,或双击某段只看那段的原文。

法国血液机构表示,攻击者在入侵一家制冷设备供应商后,篡改了法国民用血液服务机构使用的冷藏设置。法国血液机构(EFS)周二证实了这起事件,称其自身系统并未被直接针对。防护措施避免了任何血液制品的损失。受影响的设备用于储存血液样本和冷冻血浆,包括用于输血的血浆。该机构表示:“EFS的监测和报警系统使我们能够迅速识别这些异常,并采取必要措施,确保没有任何血液样本或制品受到影响。”

Attackers tampered with cold-storage settings used by France's civilian blood service after compromising a refrigeration supplier, the organization said. The French Blood Establishment (EFS) confirmed the incident on Tuesday, saying its own systems had not been directly targeted. Safeguards prevented any loss of blood products. The affected equipment stored blood samples and frozen plasma, including plasma intended for transfusion. "The EFS' monitoring and alarm systems enabled the rapid identification of these anomalies and the implementation of necessary measures to ensure that no blood samples or products were compromised," it said.

“因此,根据具体情况,事件发生后,受影响设备要么在未影响产品和样本的情况下得到控制,要么被隔离;这些冷藏室中储存的产品被预防性地转移到其他设施。”EFS未公开供应商的名称。据报道,攻击者将冷藏室温度设置从零下30摄氏度改为110摄氏度。这并不意味着设备或其内容物达到了更高的温度。该机构还表示,已通知该国网络安全机构ANSSI和卫生部。

"Thus, depending on the circumstances, as soon as the incident occurred, the affected equipment was either brought under control without impacting the products and samples, or neutralized; the products stored in these cold rooms were preventively transferred to other facilities." The EFS did not name the supplier publicly. According to reports, attackers changed cold-room temperature settings from -30°C to 110°C. That does not mean the equipment or its contents reached the higher temperature.

周一上午,零售商上班后发现地板上有积水,原因是网络犯罪分子启动了除霜模式,此后有关欧洲各地制冷设备遭网络攻击的消息开始传出。有关超市遭攻击的报道描述了远程激活的除霜循环和高达50摄氏度的温度,迫使零售商丢弃变质食品。攻击者身份尚未查明。自周一首次披露以来,已有更多零售商报告受到干扰。

The organization added that it notified the country's cybersecurity agency, ANSSI, and the Ministry of Health. News about cyberattacks targeting refrigeration devices across Europe emerged on Monday morning after retailers arrived to work, only to find puddles on the floor after cyber criminals activated defrost modes. Reports of the supermarket attacks describe remotely activated defrost cycles and temperatures as high as 50°C, forcing retailers to discard spoiled food. The attackers have not been identified.

比利时、爱尔兰、卢森堡和瑞典的门店最先报告问题,此后爱沙尼亚、芬兰、德国、葡萄牙、罗马尼亚和荷兰的案例也得到证实。

More retailers have reported disruption since the initial disclosures on Monday.

英国国家网络安全中心(NCSC)首席执行官理查德·霍恩周三在接受BBC广播四台《今日》节目采访时表示,他了解到英国本国食品供应链中出现了“几起受影响的情况”。目前尚无受影响的英国企业公开承认自身受到影响,但英国独立肉类供应商协会(AIMS)向BBC表示,其300多家会员中有一部分已成为攻击的“附带受害者”,其中两家报告称其冷柜已开始解冻。

Stores across Belgium, Ireland, Luxembourg, and Sweden were the first to report issues, although cases from Estonia, Finland, Germany, Portugal, Romania, and the Netherlands have since been confirmed. Richard Horne, chief executive of the UK's National Cyber Security Centre (NCSC), told BBC Radio 4's Today program on Wednesday that he was aware of "a couple of impacts" in the UK's own food supply chain.

最新一波冷库攻击发生在一个月前的第一波攻击之后,当时法国连锁超市家乐福、U合作社、Intermarché、Monoprix等受到影响。两波针对超市的攻击均涉及对制冷控制系统的远程干扰,造成库存损失。影响EFS的攻击是否使用了相同的入侵途径,目前仍不清楚。一些受影响连锁企业在其系统中发现了丹佛斯控制器;另一些则表示并未使用该公司的设备。

No affected UK businesses have publicly identified themselves, although the British Association of Independent Meat Suppliers (AIMS) told the BBC that some of its more than 300 members had become "collateral" in the attacks, with two reporting that their fridges had begun defrosting. The latest wave of cold-store attacks comes a month after the first, which affected French supermarket chains Carrefour, Coopérative U, Intermarché, Monoprix, and others. Both supermarket waves involved remote interference with refrigeration controls, causing stock losses. Whether the attack affecting EFS used the same access route remains unclear.

CERT-FR在攻击发生时发布了一份公告,敦促各组织修复丹佛斯AK-SM和AK-SC控制器中的漏洞。法国遭受攻击之前,曾有报道称美国军事 commissaries(军人超市)遭到入侵,同样在8月导致了食品浪费。®

Some affected chains identified Danfoss controllers in their systems; others said they did not use the company's equipment. CERT-FR published an advisory at the time of the attacks urging organizations to remediate vulnerabilities in Danfoss AK-SM and AK-SC controllers. The attacks in France followed reports of compromises at US military commissaries, which also led to food wastage in August. ®

阅读媒体原文 ↗