US Agencies Warn Threat Actors Target Commercial Refrigeration Systems

# US Agencies Warn Threat Actors Target Commercial Refrigeration Systems

https://gcdradar.vercel.app/incidents/us-agencies-warn-threat-actors-target-commercial-refrigerati · AIR-2026-1809 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed active targeting of critical infrastructure reported by multiple US federal agencies.
- Fix status: No fix needed
- First reported: 2026-11-06
- AI role: No AI role
- Products: Refrigeration system controllers

## Summary

Five US federal agencies issued a joint warning regarding ongoing attacks against grocery store and cold storage refrigeration controllers. Threat actors are attempting to manipulate temperatures and force continuous heating cycles.

## What to do

Review the joint advisory from CISA and partner agencies and secure refrigeration system controllers against unauthorized access.

## Latest updates

- 2026-11-09: Compromised refrigeration controllers are repurposed into infrastructure for a spam botnet and proxy services (https://helpnetsecurity.com/2026/11/09/copeland-xweb-refrigeration-controllers-spam-botnet)
- 2026-11-09: Agencies warn that attacks on refrigeration controllers risk causing fires and inventory loss (https://thehackernews.com/2026/11/us-agencies-warn-refrigeration.html)
- 2026-11-06: US agencies warn attackers are targeting refrigeration systems that protect food and medicine (https://helpnetsecurity.com/2026/11/06/cyberattacks-refrigeration-systems-cisa-fbi)

## Sources

- 2026-11-06 Help Net Security: US agencies warn attackers are targeting refrigeration systems that protect food and medicine https://helpnetsecurity.com/2026/11/06/cyberattacks-refrigeration-systems-cisa-fbi
- 2026-11-09 The Hacker News: U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses https://thehackernews.com/2026/11/us-agencies-warn-refrigeration.html
- 2026-11-09 Help Net Security: Hackers abuse refrigeration controllers to send spam and route proxy traffic https://helpnetsecurity.com/2026/11/09/copeland-xweb-refrigeration-controllers-spam-botnet

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.