黑客在不到一个月的时间里两次控制了欧洲各地超市的冰柜，引发火灾并导致数百万欧元的食品变质。
Hackers have twice taken control of supermarket fridges across Europe in less than a month, sparking fires and spoiling millions of euros’ worth of food.
10月11日和12日，攻击者将法国约700家门店的设备温度升高至高达50摄氏度（122华氏度）。11月2日，第二波疑似网络攻击波及至少九个欧洲国家的超市和食品企业，包括比利时、爱沙尼亚、芬兰、爱尔兰、意大利、卢森堡、荷兰、葡萄牙和瑞典。
On October 11 and 12, attackers heated units at about 700 French stores to as high as 50C (122F). On November 2, a second wave of suspected cyberattacks affected supermarkets and food businesses in at least nine European countries, including Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal and Sweden.
巴黎一家超市的空冰柜，拍摄于2026年10月法国门店制冷系统遭遇网络攻击后。标牌写着：“我们的门店遭到黑客攻击，制冷系统受到影响。” [Lucien Libert/路透社] 法国随后将首次攻击归咎于“沙希德·卡韦”，这是一个隶属于伊朗伊斯兰革命卫队（IRGC）的网络部队，并称这是法国本土遭遇的首次大规模破坏性网络攻击。第二波攻击的幕后黑手目前尚不清楚。
Empty freezers at a Paris supermarket after the October 2026 cyberattack on French stores’ refrigeration systems. The sign reads: ‘Our store has been hacked, and our refrigeration system has been affected.’ [Lucien Libert/Reuters] France has since blamed the first attack on Shahid Kaveh a cyberunit affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC), calling it the first large-scale sabotage cyberattack on French soil. It is not yet clear who was behind the second wave. The attacks have raised concern about how exposed internet-connected equipment has become, from industrial machinery to household appliances.
这些攻击引发了人们对联网设备暴露程度的担忧，从工业机械到家用电器无不如此。半岛电视台为您梳理了家中面临风险的设备、您依赖的基本服务，以及您可以采取的防护措施。冰箱是如何被黑的？
Al Jazeera illustrates the devices at risk in your home and the essential services you rely on, and what you can do to protect yourself. How can a fridge be hacked? A supermarket’s fridges and freezers are run from one control panel, which is connected to the internet so contractors can manage it remotely.
超市的冰箱和冰柜由一个控制面板统一管理，该面板连接互联网，以便承包商远程管理。家用智能冰箱的连接方式相同，通过Wi-Fi、应用程序或云服务。
Home smart fridges connect the same way, through Wi-Fi, an app or a cloud service. The attackers reportedly found the supermarket systems using Shodan, a search engine for internet-connected devices.
据报道，攻击者使用“鲨丹”（Shodan，一款联网设备搜索引擎）发现了这些超市系统。根据法国国家网络安全局（ANSSI）局长文森特·斯特鲁贝尔的说法，他们利用基本的安全漏洞入侵：暴露在外 设备直接连接在公开互联网上，没有任何额外防护。弱密码 许多系统仅受弱密码或默认密码保护。过时 许多设备属于老旧型号，不再获得安全更新。
According to Vincent Strubel, head of France’s National Cybersecurity Agency (ANSSI), they got in through basic security failures: Exposed The equipment was directly connected to the open internet with no extra protection. Weak passwords Many systems were protected only by weak or defaults. Outdated Many units were old models that no longer get security updates.
一旦进入系统，黑客可以关闭冰箱、调高温度或窃取账户详细信息。在法国，他们仅仅利用了控制器自带的除霜功能。防护薄弱的冰箱还可能成为同一网络上其他设备的入口，从笔记本电脑到智能门锁。
Once inside, hackers can switch a fridge off, raise its temperature or steal account details. In France, they simply used the controllers’ own defrost function. A poorly protected fridge can also be a doorway to other devices on the same network, from laptops to smart locks.
10月21日，斯特鲁贝尔在法国参议院发言时警告称，医疗行业使用同类设备来储存疫苗和危险材料，范围涵盖研究实验室到药店。你的智能家居有多容易被黑？从本质上讲，任何通过互联网连接的设备都可能被黑客攻击。
Speaking to the French Senate on October 21, Strubel warned that the healthcare sector uses the same type of equipment to store vaccines and hazardous materials, from research laboratories to pharmacies. How hackable is your home? Essentially, anything connected via the internet could potentially be hacked.
根据Kepios发布的《2027年全球数字概览报告》，全球约有210亿台短距离连接设备（如智能手表）和54亿台长距离连接设备（如远程监控系统）。据Parks Associates统计，美国联网家庭现在平均拥有约18台连接设备，数量比十年前几乎翻了一番。
There are about 21 billion short-range connected devices, such as smartwatches, worldwide and 5.4 billion long-range ones, such as remote monitoring systems, according to Kepios’s Digital 2027 Global Overview Report. US internet households now have an average of about 18 connected devices, nearly double the number a decade ago, according to Parks Associates.
路由器是最大攻击目标之一，因为它们始终在线。4月，英国国家网络安全中心（NCSC）警告称，与俄罗斯格鲁乌军事情报机构有关联的黑客正在劫持家庭和小型企业路由器。通过篡改其DNS设置——即将网站名称转换为IP地址的设置——黑客将用户重定向到虚假网站，以窃取密码和个人详细信息。
Routers are among the biggest targets because they are always online. In April the UK’s National Cyber Security Centre (NCSC) warned that hackers linked to Russia’s GRU military intelligence were hijacking home and small business routers. By tampering with their DNS settings, which turn website names into IP addresses, the hackers redirected users to fake websites to steal passwords and personal details.
智能电视可能在用户不知情的情况下被黑。6月，研究人员发现，LG和三星智能电视上超过三分之一的应用程序可能让陌生人秘密利用家庭的互联网连接，将自己的活动隐藏在该家庭的IP地址背后。
Smart TVs can be hacked without their owners knowing. In June, researchers found that more than a third of apps on LG and Samsung smart TVs could let strangers secretly use a household’s internet connection hiding their own activity behind that home’s IP address.
扫地机器人可能泄露更多信息。据报道，今年早些时候，一名程序员发现他可以用PlayStation 5手柄控制近7000台大疆Romo扫地机器人。他利用Anthropic公司开发的AI编码工具Claude Code，弄清了吸尘器与大疆服务器的通信方式，从而获取了其实时摄像头画面、音频以及人们家中的平面图。哪些关键服务可能遭到黑客攻击？
Robot vacuums can expose even more. Earlier this year, a programmer reportedly found he could control almost 7,000 DJI Romo robot vacuums with a PlayStation 5 controller. Using Claude Code, an AI coding tool made by Anthropic, to work out how the vacuums talked to DJI’s servers, he gained access to their live camera feeds, audio and floor plans of people’s homes. What vital services can be hacked?
暴露冰箱漏洞的那些同样的弱点，也可能影响发电厂、供水系统、银行和医院。
The same weaknesses that expose a fridge can affect power plants, water supplies, banks and hospitals.
许多此类服务由可在线访问的工业计算机运行。自美以对伊朗战争开始以来，美国机构警告称，与伊朗有关的黑客正在攻击这些系统。
Many of these services are run by industrial computers that can be reached online. Since the US-Israel war on Iran began, US agencies have warned that Iran-affiliated hackers are attacking these systems.
据该州IT机构称，7月，美国明尼苏达州发生的一起网络攻击针对30多个社区供水系统。官员怀疑是与伊朗有关的黑客所为，联邦调查局（FBI）和网络安全和基础设施安全局（CISA）警告称，水务和污水处理系统正日益成为攻击目标，当时已有12个州的设施受到影响。
In July, a cyberattack in the US state of Minnesota targeted more than 30 community water systems, according to the state’s IT agency. Officials suspected Iran-aligned hackers, and the FBI and CISA warned that water and wastewater systems were increasingly being targeted, with facilities in 12 states affected at the time.
同一个月，一起据称由与伊朗有关的黑客发动的网络攻击，迫使英国一座小型发电厂离线运行四天。据报道，这是同类攻击首次成功针对英国能源基础设施。
That same month, a cyberattack attributed to Iran-linked hackers forced a small British power plant offline for four days. It was reported as the first successful attack of its kind on UK energy infrastructure.
美国网络安全和基础设施安全局（CISA）列出了其认定的关键基础设施部门。下图显示了其中一些关键部门，以及针对每个部门的黑客攻击可能对您意味着什么。
The US Cybersecurity and Infrastructure Security Agency (CISA) lists sectors it considers critical infrastructure. The graphic below shows some of the key ones, and what a hack on each could mean for you.
银行也是攻击目标。9月下旬至10月初，黑客从韩国至少七家金融公司窃取个人数据，影响约6.8万人。其中艺加兰储蓄银行和新韩银行受创最重，受影响客户分别约为4万和2.5万。
Banks are targets, too. In late September and early October, hackers stole personal data from at least seven South Korean financial firms, affecting about 68,000 people. Yegaram Savings Bank and Shinhan Bank were hit hardest, with about 40,000 and 25,000 customers affected, respectively.
据《华尔街日报》报道，攻击者使用了ARTEX，这是一款由中国开发的开源AI工具，用于测试网络弱点。美国网络安全公司CrowdStrike表示，攻击者很可能是一名中国籍个人，还使用了Claude Code，该公司对此评估持中等信心。哪些行业最常成为政治攻击目标？
According to The Wall Street Journal, the attacker used ARTEX, an open-source AI tool developed in China to test networks for weaknesses. US cybersecurity firm CrowdStrike said the attacker was likely a China-based individual who also used Claude Code, an assessment it made with moderate confidence. Which industries are most politically targeted?
欧洲网络事件库（EuRepoC），一个追踪全球政治性网络攻击的研究数据库，记录了2000年1月至2026年11月间发生的4932起重大事件。
The European Repository of Cyber Incidents (EuRepoC), a research database tracking political cyberattacks worldwide, logged 4,932 major incidents between January 2000 and November 2026.
近年来，此类事件数量急剧增加，2024年达到795起的峰值。自2000年以来记录的所有事件中，约三分之二发生在2022年以后。
The number of incidents has grown sharply in recent years, peaking at 795 in 2024. About two-thirds of all incidents recorded since 2000 have occurred since 2022.
政府是最大的攻击目标。国家机构占所有目标的近40%，其中以公务员系统和政府部门为首，其次是军队、警察、政党和立法机关。
Governments are the biggest target. State institutions account for nearly 40 percent of all targets, led by the civil service and government ministries, followed by the military, police, political parties and legislatures.
关键基础设施是第二大被攻击领域，主要包括医疗、金融、电信、交通和能源，其次是国防企业、制造业、研究机构和数字服务提供商。企业、学校、公民社会团体和媒体机构构成了其余大部分目标。
Critical infrastructure is the second most targeted sector, led by health, finance, telecommunications, transport and energy, followed by defence firms, manufacturing, research and digital service providers. Companies, schools, civil society groups and media outlets make up most of the rest.
EuRepoC仅追踪具有政治意义的攻击，这只是所有网络攻击的一小部分。除此之外，黑客还经常以诈骗为目的攻击个人和企业。如何保护自己？黑客利用的弱点包括弱密码和不再接收更新的设备。
EuRepoC tracks only politically significant attacks, a fraction of all cyberattacks. Beyond these, hackers often target individuals and companies with scams. How to protect oneself? Hackers rely on weaknesses such as weak passwords and devices that no longer receive updates.
布里斯托大学网络安全教授阿瓦伊斯·拉希德告诉半岛电视台，随着基础设施日益数字化，网络攻击造成中断的风险已上升。但他补充道，“世界之所以运转，是因为网络安全在有效发挥作用”。
Awais Rashid, a professor of cybersecurity at the University of Bristol, told Al Jazeera that as infrastructure becomes more digitised, the risk of disruption from cyberattacks has risen. But, he added, “the world works because cybersecurity works effectively”.
英国国家网络安全中心（NCSC）还建议人们关闭不使用的功能，例如远程摄像头访问。
The UK’s NCSC also advises people to turn off features they don’t use, such as remote camera access.
如果发电厂或供水系统遭到黑客攻击，个人几乎无能为力。英国上个月启动的“Be Ready”运动，部分是为了应对网络威胁，该运动敦促家庭储备三天量的水、食物、药品、现金和手电筒。
If a power plant or water system is hacked, there is little individuals can do. The UK’s Be Ready campaign, launched last month partly in response to cyber-threats, urges households to keep a three-day supply of water, food, medicine, cash and torches.
下图展示了您可以采取的五个简单步骤，以保护自己免受黑客攻击。
The graphic below shows five simple steps you can take to protect yourself from hackers.
