Retail Stores Hacked: Password Calculated with Daily Date

The cyberattack, which occurred on October 11-12, targeted several major supermarket chains, including Intermarché, E. Leclerc, and Monoprix. The attackers exploited vulnerabilities in industrial control systems, specifically the AK-SM 800A and Danfoss consoles, which were left unpatched since 2021. The attack resulted in the modification of refrigeration equipment temperatures, leading to stock losses and millions of euros in damages.

The ease of identification of the vulnerabilities highlights the risks associated with connected devices controlling physical installations. Thomas Gayet, director general of Scovery, notes that connecting objects to the internet introduces digital risks into the physical world.

The Anssi agency emphasizes that industrial equipment often remains unpatched for long periods, particularly if designed to operate for several decades, complicating their security.