First fridges and freezers, what next? Cybersecurity experts reveal the crucial systems that could be targeted by hackers - including lifts, doors, and traffic lights

Supermarket fridges and freezers in seven European countries have been hit by an unprecedented cyberattack that caused temperatures to soar to 50°C (122°F). The attacks targeted about 40 Delhaize supermarkets in Belgium and Luxembourg, as well as a smaller number of brands in Ireland, Sweden, Estonia, Finland and the Netherlands.With no clear financial motivation and no hacker taking credit, cybersecurity agencies are scrambling to discover who is behind the attack.Now, experts say that this could just be the beginning. Speaking to the Daily Mail, they warn that almost any device that connects to the internet could become the target of a similar attack.That includes everything from critical infrastructure like water and power to everyday essentials like lifts and traffic systems. Supermarket fridges and freezers in seven European countries have been hit by an unprecedented cyber-attack that caused some to heat up to 50°C (122°F). Pictured: An employee cleans refrigerators which had been hacked at an ICA store in Stockholm, Sweden The attacks hit supermarkets in Belgium and Luxembourg, as well as a smaller number of brands in Ireland (pictured), Sweden, Estonia, Finland and the NetherlandsThe attack on European supermarkets comes just weeks after a similar incident hit hundreds of French supermarkets.What's more, US authorities are currently investigating what caused several refrigerator malfunctions on American military bases in August.It isn't yet clear if these attacks are related, but some experts suggest that they could be part of a wider sabotage programme launched by an adversarial nation-state.Tom Hegel, Distinguished Threat Researcher and Research Lead at SentinelOne, told the Daily Mail: 'Ransomware groups usually try to get paid, and hacktivists usually want the public credit.'In this case, neither has happened, which makes it start to look like the low-cost, deniable sabotage Europe has been dealing with for several years, from damaged undersea cables to warehouse arson and GPS jamming.'If causing chaos is the attackers' goal, supermarket supply chains might make for an easy target.They operate enormous estates of refrigeration controllers, building management systems, door access panels and sales terminals that are often installed by contractors that don't work with cyber-security teams.This creates a vast web of potential vulnerabilities with the potential for severe disruption and financial loss. Supermarket fridge systems could just be the start, and attacks on refrigeration in medical or pharmaceutical companies could cause vast financial losses and deadly shortages of critical medicines. Pictured: the Covid-19 vaccine in a fridge What could be the next target for hackers after supermarket fridges? Medical refrigeration systemsBuilding controls Door locking systemsLiftsWater cleaning plantsPower plantsTransport infrastructure Food logistics systems 'With thousands of these interfaces still online, I expect more incidents like this,' says Mr Hegel.However, experts point out that tampering with refrigeration systems could cause a lot more damage than spoiled food.Dan Bird, EMEA Field CTO at Horizon3, told the Daily Mail: 'The attack on supermarket refrigeration shows that any device with an internet-facing connection can be a target. Almost anything linked to a central system could be exposed.'If supermarket fridges can be hacked, the obvious question is what that means for fridges and freezers in other industries. Take healthcare or pharmaceuticals, where medicines and blood samples must be kept at precise temperatures.'An attack on those systems could severely disrupt patient care, spoiling millions of pounds worth of vital medicines and creating life-threatening shortages.'As more devices become connected to the internet for convenience, the so-called 'attack surface' for hackers to target also becomes significantly bigger.These problems are made even worse by the fact that some parts of our critical infrastructure are so old that modern cybersecurity controls can't even be applied.As AI speeds up the rate at which hackers can find vulnerabilities, this means even more devices could soon become a potential target. Speaking to the Daily Mail, they warn that almost any device that connects to the internet could become the target of a similar attack. That includes everything from critical infrastructure like water and power to everyday essentials like lifts and traffic systems. Pictured: crosswalks in Denver were hacked earlier this year to blare vile messages about the presidentVulnerable devices include many of the often-overlooked systems that are vital for modern life and business.Marijus Briedis, Chief Technology Officer at NordVPN, told the Daily Mail: 'Criminals do not have to steal a single customer record to bring a business to a standstill. Interfering with heating, ventilation, access controls or connected machinery can disrupt the building or the work taking place inside it.'The consequences depend on what the compromised system controls and what safeguards are in place. An attack could leave staff unable to enter part of a building, stop production or interfere with temperatures in a warehouse.'Likewise, Rob Demain, CEO of cybersecurity company e2e-assure, suggests that this could extend to 'building and lift systems', which are increasingly internet-connected.Mr Demain told the Daily Mail: 'Manipulating the digital controllers of lifts could trap occupants between floors, halt ventilation, create panic, or shut down emergency evacuation and fire-service lift modes during an active fire.'Similarly, Mr Demain says that simple building controls could be used to devastating effect.He says: 'Disabling air conditioning, chilling plant loops, or positive pressure systems in data centres causes thermal runaway and server destruction within minutes. 'In pharmaceutical cleanrooms or hospitals, tampering with temperature destroys sterile environments, invalidates vaccine or blood storage, and contaminates surgical theatres.'However, the biggest worry for cybersecurity experts is that Britain's critical infrastructure itself could become the target of an attack.Dan O'Dowd, CEO of Green Hills Software, warns that 'hackers, rogue states, and terrorists' could all exploit defects in computer-controlled systems.He told the Daily Mail: 'Connecting our power grid, water treatment plants, and other critical infrastructure to the internet with software riddled with millions of bugs and security defects has turned these systems into weapons of mass destruction in the hands of our enemies.'A cyberattack on Britain's critical infrastructure would take the country back to 1820. We cannot survive without our critical infrastructure.'Supermarkets would be empty. Electricity and water would not be supplied to homes. Transport networks would be paralysed. Without electricity or clean water, society would collapse within a matter of weeks. It would be a total catastrophe.'This comes as the National Cyber Security Centre (NCSC) publishes its Annual Review document, which warns that the UK’s critical national infrastructure should be braced for a ransomware attack involving AI-powered malware by 2028.The report warns that nation-states like China and Russia will 'routinely' use AI in cyber activity to achieve geopolitical goals.Dr Richard Horne, CEO of the NCSC, is expected to say in a speech today: 'In the coming months, we face a real prospect of an unprecedented rise in the number of cyber incidents.'Commenting on the report, Graeme Stewart, head of public sector at Check Point, told the Daily Mail: 'The NCSC is warning that AI-powered ransomware could hit Britain's critical infrastructure within two years, but the uncomfortable reality is that our essential services are already under attack, and have been for years.'Richard Horne is absolutely right to call out decades of underinvestment in cyber security, but frankly, it's a conversation we should have been having much more seriously 18 months ago.'