Malicious cyber activity is currently targeting industrial refrigeration and cold chain monitoring systems on a global scale. This activity has been noted by the Cybersecurity and Infrastructure Security Agency (CISA), FBI, HHS, USDA, and DoT.
These systems are widely used by organizations in the Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems Sectors. The actors involved may exploit vulnerabilities in unpatched or internet-accessible controllers to remotely alter system settings.
Such exploitation could result in widespread inventory loss and equipment hazards. There is also a risk of indirect harm to consumers if products are consumed after being stored unsafely due to these cyber activities.
The authoring organizations recommend that owners and operators implement strong authentication measures and keep their systems updated. Additional recommendations include eliminating public internet exposure and isolating operational technology devices.
Owners and operators are also advised to maintain current backups offsite and offline. U.S. organizations are encouraged to report any suspicious or criminal activity related to this issue.