Today's cybersecurity headlines are brought to you by ThreatPerspective


Ethical Hacking News

A Cyberattack on the Cooling Systems of European Supermarkets: Understanding the Threat and the Response




A wave of cyberattacks has hit supermarkets across Europe, forcing several dozen stores to pull food from sale due to warming refrigeration systems. The attacks, which began on Monday, November 2, have been attributed to compromised Danfoss products and a shared method. The affected stores have been advised to take steps to prevent further attacks, including disconnecting their products from the internet, updating their firmware, and implementing additional security measures. Danfoss has also advised customers to update their firmware and to disconnect their products from the internet if they are not being used. The attacks have raised concerns about the security of the refrigeration systems used in supermarkets across Europe.

  • Several European supermarkets have been targeted by cyberattacks on their cooling systems, resulting in several dozen stores being affected.
  • The attacks have been attributed to compromised Danfoss products and a vulnerability in the software of these products, which is due to outdated firmware.
  • The affected stores have been advised to disconnect their products from the internet, update their firmware, and implement additional security measures to prevent further attacks.
  • The attacks have raised concerns about the security of the refrigeration systems used in supermarkets across Europe.
  • The European supermarkets affected by the attacks include Delhaize, Carrefour, Intermarché, Spar, IKEA, ICA, Coop, and Musgrave.
  • The attacks are believed to be a variant of the PHP2Shell attack, but the identity of the attackers is not yet clear.



  • The past few days have witnessed a wave of cyberattacks targeting the cooling systems of supermarkets across Europe. The attacks, which began on Monday, November 2, have resulted in several dozen stores being affected, with some being forced to pull food from sale due to the warming of their refrigeration systems. The affected stores include those operated by well-known supermarket chains such as Delhaize, Carrefour, and Intermarché.

    According to reports, the attackers remotely changed the settings on the refrigeration controls of the affected stores, causing them to warm up instead of keeping food cold. The attacks have been attributed to the use of compromised Danfoss products, which are used in the refrigeration systems of many supermarkets across Europe.

    The Danfoss products, specifically the AK-SM 800 and AK-SC 355 models, have been identified as being vulnerable to the attacks. The attackers were able to exploit a weakness in the software of these products, which is said to be due to outdated firmware. Danfoss has since issued a statement, advising customers to update their products' firmware and to disconnect them from the internet if they are not being used.

    The attacks have also been linked to a previous incident in France, where Danfoss products were also targeted. In that incident, attackers were able to gain access to the systems of hundreds of supermarkets across France. It is believed that the attackers used the same method in both incidents, exploiting the same weakness in the software of the Danfoss products.

    The affected stores have been advised to take several steps to prevent further attacks. These steps include disconnecting their products from the internet, updating their firmware, and implementing additional security measures. Danfoss has also advised customers to use a secure internet connection when managing their refrigeration systems.

    The European supermarkets that were affected by the attacks are Delhaize, Carrefour, Intermarché, Spar, IKEA, ICA, Coop, and Musgrave. Other supermarkets, such as those operated by Kesko and Mosqueteiros, have also been affected by the attacks.

    The attacks have been attributed to a shared method, which is believed to be a variant of the PHP2Shell attack. However, it is not yet clear who is behind the attacks or whether they are linked to the previous incident in France.

    The affected stores have been advised to be vigilant and to take steps to protect their systems from further attacks. Danfoss has also issued a statement, advising customers to be cautious and to take steps to protect their products from future attacks.

    In response to the attacks, several organizations, including the European supermarkets that were affected, have issued statements, advising customers to take steps to prevent further attacks. Danfoss has also issued a statement, advising customers to update their firmware and to disconnect their products from the internet if they are not being used.

    The attacks have also raised concerns about the security of the refrigeration systems used in supermarkets across Europe. The use of compromised products and the exploitation of weaknesses in the software of these products have raised questions about the effectiveness of the security measures in place.

    The affected stores have been advised to take steps to prevent further attacks, including disconnecting their products from the internet, updating their firmware, and implementing additional security measures. Danfoss has also advised customers to use a secure internet connection when managing their refrigeration systems.

    The attacks have been attributed to a shared method, which is believed to be a variant of the PHP2Shell attack. However, it is not yet clear who is behind the attacks or whether they are linked to the previous incident in France.

    The affected stores have been advised to be vigilant and to take steps to protect their systems from further attacks. Danfoss has also issued a statement, advising customers to be cautious and to take steps to protect their products from future attacks.

    In conclusion, the recent cyberattacks on the cooling systems of European supermarkets are a significant concern for the security of the food supply chain. The attacks, which began on Monday, November 2, have resulted in several dozen stores being affected, with some being forced to pull food from sale due to the warming of their refrigeration systems. The affected stores have been advised to take steps to prevent further attacks, including disconnecting their products from the internet, updating their firmware, and implementing additional security measures. Danfoss has also advised customers to update their firmware and to disconnect their products from the internet if they are not being used.



    Related Information:
  • https://www.ethicalhackingnews.com/articles/A-Cyberattack-on-the-Cooling-Systems-of-European-Supermarkets-Understanding-the-Threat-and-the-Response-ehn.shtml

  • https://thehackernews.com/2026/11/second-wave-of-cyberattacks-hits.html


  • Published: Tue Nov 3 02:16:22 2026 by llama3.2 3B Q4_K_M













    © Ethical Hacking News . All rights reserved.

    Privacy | Terms of Use | Contact Us