Singapore cyber agency urges stronger defences after fridge cyberattacks in Europe

SINGAPORE: Organisations in Singapore have been urged to strengthen their cybersecurity defences following a series of overseas cyberattacks targeting operational technology (OT) systems, including refrigeration systems at hundreds of supermarkets across Europe.While no similar incidents have been reported locally, organisations should not wait for an attack to occur before taking precautions, Commissioner of Cybersecurity and Cyber Security Agency of Singapore (CSA) chief executive Gwenda Fong said on Friday (Nov 6).“They remind us that even sectors which may not traditionally consider themselves cyber targets can be vulnerable,” Ms Fong said.“And the consequences can go beyond data loss — potentially disrupting business operations, supply chains and essential services.” In an advisory on Friday, CSA said poorly secured remote access to OT systems could allow attackers to manipulate equipment settings, disrupt operations and pose safety risks.The advisory cited recent attacks on refrigeration management systems at supermarkets across Europe, as well as an incident affecting refrigeration systems at facilities operated by France’s national blood service.CSA said the incidents highlighted a broader threat involving internet-connected OT systems, which are used to monitor and control physical equipment and industrial processes.Such systems are increasingly connected to the internet or corporate networks so that operators and third-party service providers can remotely monitor, manage and maintain equipment, potentially exposing other sectors to similar vulnerabilities.Similar risks exist in sectors including energy and utilities, water treatment, manufacturing, building management, cold storage and logistics, and healthcare facilities, CSA said."While such connectivity offers significant operational benefits, poorly secured remote access can leave these systems vulnerable to potential compromise," said CSA, adding that the European incidents reportedly involved poorly secured refrigeration controllers that were accessible over the internet.In response to queries from CNA, CSA said it is working with the Singapore Food Agency and supermarket operators to strengthen cybersecurity measures of their networks and systems against cyber threats.Potential security weaknesses included weak or default credentials, outdated software and insufficient access controls, although the precise methods used by attackers remain under investigation.Once attackers gain unauthorised access, they may be able to change equipment settings, disable safety alarms or interfere with normal operations, potentially causing equipment damage, safety hazards, service disruptions and financial losses.For industries dependent on cold-chain operations, disruptions to temperature controls could also compromise product safety and supply chains.ORGANISATIONS URGED TO STRENGTHEN CYBERSECURITY SAFEGUARDSThe Singapore Computer Emergency Response Team (SingCERT) advised organisations with remotely accessible OT systems to review their cybersecurity measures and strengthen safeguards against potential attacks.Among its recommendations are restricting direct internet access to remote management interfaces and strengthening authentication and access controls.Organisations should change default passwords and use strong, unique passwords. Where remote access is necessary, they should use secure solutions such as virtual private networks (VPNs), enable multi-factor authentication where supported, and restrict access to authorised personnel and trusted service providers.Organisations should also update and secure their OT systems and devices, implement network segmentation and security monitoring, and strengthen operational monitoring and incident response.CSA also advised organisations to review equipment that has reached the end of its life or is no longer supported by its manufacturer, and put in place appropriate safeguards or replacement plans.Incident response plans should include the ability to safely isolate affected systems and revert to local or manual controls where supported, while maintaining critical operations.The advisory comes amid a series of cyberattacks targeting commercial refrigeration systems at supermarkets across Europe, drawing condemnation from the European Union and warnings from the United States.An attack on Oct 12 affected refrigeration systems at hundreds of supermarkets in France, forcing retailers to discard food after temperatures were manipulated.On Monday, grocery stores in Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands, Portugal and Sweden were also affected by suspected cyberattacks on refrigeration systems.A senior EU official described the incidents as a deliberate attempt to disrupt the food supply chain. No one has claimed responsibility for the attacks.The US warned on Thursday that unidentified "malicious cyber actors" were exploiting vulnerabilities in internet-accessible electronic temperature and commercial refrigeration controllers used in retail grocery and cold storage facilities.Refrigerators at three regional blood banks in France were also affected in a cyberattack overnight between Sunday and Monday, although blood supplies were unaffected.