Freezers as a service is apparently a common way for supermarkets to buy freezers.
Basically the company selling them gives them support if they can remotely access the freezers. Now usually there is not much todo since the company selling the freezers handles everything.
However once the freezer is “out of support” they won’t update it anymore and it is still reachable from the internet even if the company doesn’t access it anymore.
Now usually a supermarket has no IT department that locks that shit behind a vpn and/or firewall.
So there are many freezers out there available in the open Internet with no security patches available.
Until the freezer stops freezing probably nobody is paid enough to care.
Maybe they should just disconnect them from the internet. But I guess that’s too much to ask.
So they saw the first freezer attacks and said ‘nah’ to doing anything to secure them
Freezers as a service is apparently a common way for supermarkets to buy freezers.
Basically the company selling them gives them support if they can remotely access the freezers. Now usually there is not much todo since the company selling the freezers handles everything.
However once the freezer is “out of support” they won’t update it anymore and it is still reachable from the internet even if the company doesn’t access it anymore.
Now usually a supermarket has no IT department that locks that shit behind a vpn and/or firewall.
So there are many freezers out there available in the open Internet with no security patches available.
Until the freezer stops freezing probably nobody is paid enough to care.
Maybe they should just disconnect them from the internet. But I guess that’s too much to ask.