本周，法国三处处理血袋和血浆袋的场所，曾短暂受到针对易受攻击的联网冰箱的大规模攻击影响。周三，法国血液机构（Établissement Français du Sang，EFS）确认，11月2日，储存血液的冷库被“升至极高温度”。EFS表示，所幸血液样本未被改变或损坏，因为该机构的报警设施和工作人员迅速发现了变化，并采取了故障安全措施。
Three sites in France that handle blood and plasma bags were briefly impacted this week by widespread attacks on vulnerable internet-connected refrigerators. On Wednesday, the Établissement Français du Sang (EFS) confirmed that cold rooms storing blood were “raised to very high temperatures” on November 2. The blood samples, thankfully, weren’t altered or damaged, the EFS said, because the organization’s alarm facilities and staff quickly detected the changes and implemented fail-safe measures.
然而，此次事件发生在近几天席卷至少11个欧洲国家超市连锁店的网络攻击浪潮之中，这些攻击也大幅提高了超市冰箱的温度。欧洲各地的照片显示，温度飙升后，大量食品被扔掉。10月，类似的冰箱攻击影响了数百家法国商店，迫使它们扔掉食品。8月，美国军事基地上的大约六家军用商店和杂货店也遭遇了类似事件，导致食品变质。路透社上周报道，五角大楼正在调查这些事件，并与法国执法部门合作。
The incident, however, comes amid a wave of cyberattacks in recent days affecting supermarket chains in at least 11 European countries that also drastically increased the temperatures of their refrigerators. Pictures from across the continent show huge volumes of food being trashed following the spikes. Similar fridge attacks in October affected hundreds of French stores that were forced to throw away food. And in August, roughly six commissaries and grocery stores on United States military bases suffered similar incidents resulting in spoiled food. The Pentagon is investigating the incidents and is collaborating with French law enforcement, Reuters reported last week.
“十多年来，我们对联网技术的依赖增长速度始终快于集体保护它的意愿，这使我们面临事故、对手，以及现在可能的代理人风险，”长期关注关键基础设施的研究员乔什·科曼（Josh Corman）说，他目前是非营利机构安全与技术研究所（Institute for Security and Technology）的公共安全与韧性驻所高管。“这些脆弱的冷链系统至关重要，不能出错，但我们不断遭遇惨痛教训。”
“It's been true for more than a decade now that our dependence on connected technology is growing faster than our collective will to protect it, which has exposed us to accidents, adversaries, and now potentially agents,” says longtime critical infrastructure researcher Josh Corman, who is currently the executive in residence for public safety and resilience at the nonprofit Institute for Security and Technology. “These fragile cold-chain systems are too critical to fail, but we keep experiencing hard lessons.”
目前仍不清楚这些事件背后是谁，攻击是否全部相关，还是由多个行为者实施。上个月针对法国超市的第一波近期攻击似乎是由攻击者利用暴露在互联网上的未修补制冷控制器造成的，包括据称基于日期设置弱密码的软件版本。
It is still unclear who is behind the incidents and whether the attacks are all connected or being carried out by multiple actors. The first recent wave of attacks against French supermarkets last month appears to have been caused by attackers exploiting unpatched refrigeration controllers exposed to the internet—including software versions that allegedly used weak passwords formulated based on the date.
许多攻击源于攻击者利用丹麦公司丹佛斯（Danfoss）生产的温度控制器中的漏洞，研究人员表示，这些攻击并不特别难以实施。丹佛斯未回复《连线》（WIRED）的置评请求。
Many of the hacks stem from attackers exploiting vulnerabilities in temperature controllers made by the Danish firm Danfoss, and researchers say the attacks would not have been particularly difficult to pull off. Danfoss did not return WIRED’s request for comment.
在其他声明中，丹佛斯表示受影响的系统“运行的是过时的固件”，并敦促客户保持产品更新。美国网络安全与基础设施安全局（CISA）周四针对这一系列事件发布警报称，攻击可能通过身份验证绕过、任意代码注入和弱配置等漏洞利用冷库系统。专家长期警告，所谓物联网设备中的这类弱点对关键基础设施构成严重威胁。
In other statements, Danfoss said impacted systems “were running outdated firmware” and urged customers to keep products updated. In an alert on Thursday addressing the rash of incidents, the US Cybersecurity and Infrastructure Security Agency said attacks could exploit flaws in cold storage systems via authentication bypasses, arbitrary code injections, and weak configurations. Experts have long warned about the dire threats to critical infrastructure posed by these types of weaknesses in so-called internet-of-things devices.
俄罗斯黑客活动人士试图对部分攻击承担责任，但未能提供可信证据。不过，一些研究人员认为，有迹象表明俄罗斯境内的行为体可能参与了至少部分事件。克里姆林宫本周否认了参与。在其他案例中，研究人员发现了与伊朗相关行为体的潜在联系。NextGov/FCW上周报道，匿名美国官员怀疑伊朗相关攻击者可能是美国军事基地冷柜攻击的幕后黑手，尽管他们指出调查仍在进行中。
Russian hacktivists tried to claim responsibility for some of the attacks but did not provide credible evidence. Still, some researchers see signs that Russia-based actors may have been involved in at least some of the incidents. The Kremlin this week denied involvement. In other cases, researchers have found potential ties to Iran-linked actors. NextGov/FCW reported last week that unnamed US officials suspect Iran-linked attackers may have been behind the freezer attacks on US military bases, though they noted that the investigation is still ongoing.
这种冰箱/冷柜攻击并非新鲜事。2022年，俄罗斯全面与乌克兰开战之初，俄罗斯境内的16家超市曾遭到攻击。据丹佛斯（Danfoss）2025年的一份报告，当年以色列有40家商店遭到类似攻击。
This type of refrigerator/freezer attack is not new. Back in 2022, 16 supermarkets in Russia were targeted at the start of the country’s full-scale war with Ukraine. That year, 40 stores in Israel were similarly attacked, according to a 2025 report by Danfoss.
瑞典国家网络安全中心在最近关于冷柜攻击的通告中指出，“许多企业使用较旧的技术，而系统日益互联”，并表示企业应清点哪些设备连接了互联网，尽可能断开连接，如果必须保持连接，则要确保这些设备实施访问控制、打补丁并接受监控。
“Many businesses use older technology while the systems become increasingly connected,” Sweden’s National Cyber Security Center pointed out in a recent advisory about the freezer attacks, noting that companies should inventory which of their devices are connected to the internet, disconnect them whenever possible, and make sure they are kept access-controlled, patched, and monitored if they must be connected.