五角大楼把8月多座基地冷柜故障按疑似网络攻击调查：至少6家军人商店食品变质，美方正与法国执法部门联查
据路透社报道，四名知情官员表示，五角大楼正把今年8月美国多座军事基地发生的一系列离奇冷柜故障按疑似黑客攻击事件调查；那批故障曾让基地军人商店里的大量食品变质。
路透社查阅各基地当时的社交媒体帖子与网站更新后确认，8月下旬的故障至少波及6家基地军人商店（commissary）。其中至少一处，冷柜并非单纯停机，而是制冷温度在夜间被人调高，清晨只剩成堆蔫坏、融化的食品。亚利桑那州 Fort Huachuca 基地8月26日在社交媒体上解释，其冷柜「进入了除霜模式，把所有食物都加热了。相信我们，那些食物是真的坏了」。
美国陆军刑事调查司表示，其网络外地办公室已参与调查，并正与法国执法部门合作，以更好理解「欧洲的冷藏中断事件」。五角大楼在回应路透社询问时称，美军网络司令部下属一个单位正「与跨部门和执法伙伴密切协作」，但未作进一步说明。路透社表示，目前无法确认调查进展到何种程度、是否已就肇事者或原因得出结论；法国驻美使馆未回应置评请求。
法国本月早些时候发生过一起同类冷柜网络攻击：攻击者篡改商用制冷设备的温控，波及350多家商户，超市冷冻食品区大量商品变质被清架，有些制冷设备的温度被调到过高、甚至起火；一名超市经营者估计，法国那次攻击的全国损失可能达数千万欧元。专家此前告诉路透社，法国那次攻击手法并不复杂：涉事的许多控制器由丹麦公司 Danfoss 制造，型号老旧或固件过期，容易被入侵。路透社无法确认美军基地使用的是 Danfoss 或其他品牌的控制器，Danfoss 未回应置评请求。
冷藏是生鲜食品流通的关键环节，业内长期把冷储设施遭网络破坏视为噩梦级场景之一。工业网络安全公司 Xona Systems 首席执行官 Bill Moore 表示，这类联网控制器的隐患并不限于制冷系统，但对食品供应链的后果尤其严重：「它完全可能扰乱食品供应链。」
Pentagon Treats August Freezer Failures at U.S. Bases as Suspected Cyberattack, Officials Say
WASHINGTON — The Pentagon is treating the spate of mysterious freezer malfunctions that spoiled food at military bases across the United States in August as a suspected hack, according to four officials familiar with the matter, Reuters reported.
A Reuters review of the bases' contemporaneous social media posts and website updates found that the late-August malfunctions affected at least six commissaries, the on-base stores where military personnel buy food. In at least one case, the freezers did not simply stop working: the cooling units' temperatures were cranked up overnight, leaving mounds of wilted or melted food in the morning. The Fort Huachuca, Arizona, base explained on August 26 that its freezer "went into defrost mode where it heated up all the food. Trust us when we say it was 'spoiled.'"
The U.S. Army Criminal Investigation Division said its Cyber Field Office was involved in the investigation and was working with French law enforcement to better understand "the refrigeration outages in Europe." Asked about the investigation, the Pentagon said a unit of Cyber Command was "working in close coordination with interagency and law enforcement partners," without elaborating. Reuters said it could not ascertain how far the investigation had progressed or whether it had reached conclusions about who might be responsible; the French Embassy in Washington did not return a message seeking comment.
A similar French freezer cyberattack earlier this month overrode temperature controls on commercial cooling units in more than 350 establishments, clearing supermarkets' frozen food aisles of spoiled merchandise; some units were turned up so high they caught fire, and one supermarket owner estimated the French attack's total costs could reach tens of millions of euros nationwide. Experts previously told Reuters the French attack appeared easy to pull off: many of the controllers, made by the Danish firm Danfoss, were obsolete or running outdated firmware. Reuters could not establish whether Danfoss or any other brand of controller was in use at the affected U.S. bases, and Danfoss did not return messages seeking comment.
Refrigeration plays a critical role in the distribution of fresh food, and sabotage of cold storage over the internet has long been seen as a nightmare scenario. Bill Moore, chief executive of industrial cybersecurity firm Xona Systems, said concerns about online exposure were not unique to cooling systems, but the consequences could be particularly serious: "It can definitely disrupt the supply chain for food," he said.
来源：GSM·美国（原文链接）
图片来源：五角大楼航拍（2023年5月15日，美国国防部官方照片，海军二等士官 Alexander Kubitza 摄，公共领域）
