AI Summary
5 min readThe Weaponization of Food
On the night of October 11th into October 12th, managers at hundreds of French supermarkets opened their freezers to a wall of hot air. Some units hit 50 degrees Celsius. Ice cream melted, food spoiled, and in a few stores, fires broke out. About 400 stores were affected, and millions of euros in food went to waste. The EU's food commissioner called it "the weaponization of food."
Two months earlier, researchers at Clarity's Team 82 had published research on the refrigeration controllers at the center of the attack—Danfoss units that control refrigeration across entire supermarket chains. What they found: thousands of these devices exposed online, plus a hidden backdoor that lets anyone log in as an administrator without a password.
The Perfect Storm
Amir, CTO of Clarity and head of Team 82, explains that the attack combined three elements: internet-exposed devices, a known vulnerability, and someone with motivation to exploit it. "It's not a single IP that somebody just targeted a script," he says. "That's somebody that actually took the time to compose the list, to actually build the tool to do that and execute it."
Continue reading the full summary in the app — free to try.
Read Full Summary →Free • No credit card required
Never miss an episode of Hacked
Get every new episode summarized in your inbox — free, ~5 minutes to read.
No spam. Unsubscribe anytime.
What you'll learn
- 1 (00:03) **The Attack: French Supermarkets Hit Overnight** - Hackers take over Danfoss refrigeration controllers in ~400 French stores, forcing freezers to heat up to 50°C, causing millions in food spoilage and fires.
- 2 (01:11) **Setting Up the Investigation** - Host Scott introduces Amir, CTO of Clarity, who leads Team 82's research into critical infrastructure vulnerabilities.
- 3 (04:31) **What Actually Happened That Night** - Amir describes the attack as a forced "defrost mode" trigger on specific Danfoss controllers, which cut power to compressors and ruined temperature-sensitive stock.
- 4 (07:23) **Previous Attacks and Escalating Tactics** - Amir connects this to a 2022 attack in Israel and Russia, and a more sophisticated 2025 attack on a food processing plant attributed to Iranian hackers.
- 5 (08:43) **The "Perfect Storm" of Vulnerabilities** - Amir explains that Danfoss and other controllers (Copeland, Dixel) share no common design flaws—the real link is internet exposure plus a known vulnerability plus motivated attackers.
- 6 (10:43) **Why These Devices Are on the Public Internet** - Amir traces the problem to legacy remote access practices, especially the COVID-era boom in port forwarding for maintenance.
- 7 (13:50) **Hypothesizing the Attacker's Motive** - Amir argues this was not a drive-by—the attacker compiled a targeted list and built a custom tool, ruling out accidental or script-kiddie attacks.
+ Full timestamped outline available in the app
Show Notes
Early Monday, managers at hundreds of French supermarkets opened their freezers to a wave of hot air. Overnight, hackers had taken over the Danfoss software that controls the stores’ refrigeration and told it to heat up. Some units hit 50°C. Ice cream melted. In a few stores, fires broke out. About 400 stores were hit and millions of euros of food went in the bin. The EU’s food commissioner called it “the weaponisation of food.” Two months earlier, researchers at Claroty’s Team82 had published research on Danfoss’s refrigeration controllers. They’d found thousands of them exposed online, plus a hidden “code of the day” that let you log in as an administrator without a password. Scott sat down with them to talk about what they found.
Hacked is presented by NordLayer. NordLayer is a network security platform for modern teams. NordLayer gives companies centralized control over who can access their systems, keeps every connection fast and encrypted, and requires no additional hardware or complex infrastructure. nordlayer.com/hackedpodcast
Learn more about your ad choices. Visit podcastchoices.com/adchoices
More from this podcast
Hacked →