The Fridges Are Being Hacked Now... — Transcript

Full transcript

1. 0:00Hello guys and gals, me Mudahar, and
2. 0:02they're hacking the fridges, ladies and
3. 0:05gentlemen. So, you might have woken up
4. 0:07this morning and you might have heard
5. 0:08the interesting little news today that
6. 0:11uh in Europe, France, and a lot of the
7. 0:14places AROUND THE WORLD, FRIDGES got
8. 0:16hacked into, stores were hacked in, the
9. 0:18fridges got exposed, and they ruined
10. 0:21ruined all of the food by setting the
11. 0:24temperature as high as like 50 degrees
12. 0:26Celsius. Okay. Didn't really know the
13. 0:28fridges could go that high, but I guess
14. 0:30we live in an interesting world now. So,
15. 0:33you might be like, "Wow, that sounds
16. 0:34crazy, Muda. How did this happen?" Well,
17. 0:36let's get into exactly what occurred.
18. 0:38Okay, so earlier the today across all of
19. 0:40Europe, some people probably saw this.
20. 0:44Okay.
21. 0:51Of course, obviously, I don't want to
22. 0:52butcher the French language even
23. 0:54further. I'm pretty sure our French
24. 0:55Canadians do that fine enough. But of
25. 0:57course, let's get down here. No shade to
26. 0:59the French Canadians. I've only ever
27. 1:01heard
28. 1:02the French and the French Canadians are
29. 1:04at each other's. It's It's a wild world.
30. 1:06Okay. Anyways, I don't want to be
31. 1:07starting no beef with any franophones
32. 1:09out in the audience. But anyways, a
33. 1:11hacking attack happened in European
34. 1:13supermarkets spread across the continent
35. 1:16this fine Monday, hitting fridges and
36. 1:19freezers from Sweden all the way to
37. 1:22Belgium and Paris and everywhere you
38. 1:24could imagine. So basically what
39. 1:26happened is according to one person at
40. 1:28an AKA that everything is destroyed.
41. 1:30It's gone. There's been a cyber attack.
42. 1:32All the freezers reached 50° C. I did
43. 1:36not know freezers had the capability of
44. 1:38going the opposite direction. and I just
45. 1:39thought their sole job was to freeze
46. 1:42things. Now, you might be like, "Muda,
47. 1:45let let's cut the [ __ ] How the [ __ ]
48. 1:47does a fridge get hacked?" And actually,
49. 1:49it's a really good question. Most of the
50. 1:51stuff that you buy nowadays is probably
51. 1:54smart connected, right? Things like
52. 1:55your, you know, do you have a fridge
53. 1:57that has like a screen on it? Do you
54. 1:59have like any modern fridge in general?
55. 2:01Yeah, it probably does connect to the
56. 2:03internet. You know, there was a funny
57. 2:04thing that I was seeing like a year ago
58. 2:06where somebody on like Reddit was
59. 2:08complaining that their LG washing
60. 2:10machine was sending like a gig of data a
61. 2:12day. And they're like, "What would my
62. 2:14washing machine be sending to LG that
63. 2:17would be at least a gigabyte?" And
64. 2:18honestly, yeah, I do ask that question
65. 2:20sometimes. Why does a washing machine
66. 2:22need to relay a gigabyte of information
67. 2:25back to servers, right? Like, what kind
68. 2:28of an ad are you even viewing on a
69. 2:30washing machine? Why does it even need
70. 2:32to communicate? What What do you need to
71. 2:34know about your washing machine cycles
72. 2:36that you need a [ __ ] smart app for?
73. 2:38Okay, now this is obviously a little
74. 2:40less nefarious. To give you an idea,
75. 2:42just let's get into the honest facts
76. 2:44over here. A vast issue that exists
77. 2:47across everything in in in in in in the
78. 2:51space is misconfigured technology. So,
79. 2:54this is not new. In fact, people in the
80. 2:57cyber security world were talking about
81. 2:58this [ __ ] back in February of 2019.
82. 3:02Network refrigeration that is used in
83. 3:04supermarkets,
84. 3:06hospitals, these are exposed to the
85. 3:09internet because we don't actually like
86. 3:12configure them to not expose themselves
87. 3:14to the internet in this capacity. So,
88. 3:16the actual culprit over here actually
89. 3:18comes out to Danfos. So, to give you an
90. 3:21idea of like this this not being sort of
91. 3:24a new thing, back in October of this
92. 3:26year alone, there was a French
93. 3:28supermarket refrigerator hack. It's got
94. 3:30a whole Wikipedia page and everything.
95. 3:33In fact, even the Wikipedia Wikipedia
96. 3:36moderators were like, "Yeah, we should
97. 3:37just change this to like the European
98. 3:39refrigerator hackings." Okay. But
99. 3:42basically what's kind of happening over
100. 3:43here is at least these refrigeration
101. 3:46controllers by a company known as Danfos
102. 3:48was actually run over a web server that
103. 3:51was reachable by anybody on the public
104. 3:53internet. Right? So basically the real
105. 3:56damage here is food, right? So obviously
106. 3:59food is a perishable item. Uh you know
107. 4:01if you [ __ ] with the temperature too
108. 4:02much, if you destroy refrigeration, that
109. 4:05food that is on the shelf basically gets
110. 4:07thrown out, right? We're c we're talking
111. 4:09millions of dollars of damages when you
112. 4:11add it all up. The other reality of it
113. 4:13is is that food is also a very important
114. 4:16thing. Human beings need food to live.
115. 4:18Okay? If you and I don't eat long
116. 4:20enough, we could get, you know, we we
117. 4:22could die. We could die of starvation.
118. 4:26So, that's kind of like an important
119. 4:27thing, right? Obviously, we can all
120. 4:29laugh about, oh, the fridges got hacked,
121. 4:30but realistically, yeah, the fridges did
122. 4:33get hacked and stuff was destroyed in
123. 4:35the process. So again, what's happening
124. 4:37over here is they mentioned these
125. 4:38refrigeration controllers by a company
126. 4:40known as Danfos. Now Danfos produces
127. 4:44these like refrigeration controller
128. 4:46devices that allow store managers to
129. 4:48actually monitor and control the
130. 4:50fridges. So this is what they kind of
131. 4:51look like. This is an AKSM800A.
132. 4:55Now if you look at it, it seems like
133. 4:56like a home security device or some [ __ ]
134. 4:58like that, you know, like you can
135. 5:00actually access each and every single
136. 5:02fridge. You can run your little scripts
137. 5:04on it, modify it, do whatever you need
138. 5:06to. The problem is is when you expose
139. 5:09this device to the public facing
140. 5:12internet. Now, there's a lot of devices
141. 5:14in my home, in your home that connect
142. 5:16and talk to each other in your own home,
143. 5:18in your inside your internet. Now, just
144. 5:21because something exists in your home
145. 5:24doesn't mean you expose it to the rest
146. 5:26of the world. For instance, I do have a
147. 5:27smart television that can communicate to
148. 5:30an external server. I choose not to let
149. 5:33it communicate because I don't really
150. 5:34care for the smart features or anything
151. 5:36of that nature. So, I basically block it
152. 5:38off at the network level. That's not
153. 5:40what happened with these Danfos devices,
154. 5:43it seems. So, according to people like
155. 5:45Kevin Bowmont, what they basically said
156. 5:46is this Danfos fridge thing that's doing
157. 5:49the round in the media, there's several
158. 5:51thousand of them that are directly
159. 5:54internetf facing. The username according
160. 5:56to this guy is admin and the password
161. 5:58changes every day to the current day.
162. 6:01Every single one is like this. You can
163. 6:04just log in and change the temperature.
164. 6:06Anyone can do it easily scriptable which
165. 6:08is how it was able to I guess allegedly
166. 6:10happen at such scale. So to give you an
167. 6:13idea, the way that the hackers kind of
168. 6:15found these administration panels like
169. 6:17you're seeing here, the system manager
170. 6:19800A is that effectively they used a
171. 6:23public search engine like showdown. Now
172. 6:25there's a search engine for something
173. 6:27called the internet of everything. I
174. 6:28talk about the IoT devices. So imagine
175. 6:31there's like you know Google where you
176. 6:33search for websites on the internet.
177. 6:34What happens over here is basically you
178. 6:37can enter in device like uh you can
179. 6:40enter in device like you know operating
180. 6:42systems like Windows XP or whatever and
181. 6:44you can find expise you can find devices
182. 6:48with identifiers exposed to the public
183. 6:50facing internet. So what a bunch of
184. 6:52hackers did over here is they use search
185. 6:54engines like Shoddon to search for those
186. 6:57Danfos you know uh interfaces on the
187. 7:00public web. If you had these devices,
188. 7:02you wouldn't let them expose themselves
189. 7:04to you would lock them behind a
190. 7:06firewall. You would make sure that
191. 7:08accessing them required a VPN that you
192. 7:11set up to access. If I want to access
193. 7:14that computer from outside this house, I
194. 7:16don't expose that to the public
195. 7:18internet. No, I have a device that
196. 7:21serves as the VPN gateway that I dial
197. 7:23into and then I connect to that device.
198. 7:26Okay? You don't just raw dog everything
199. 7:28to the world. So, to show you how [ __ ]
200. 7:30up it is, you can search for devices
201. 7:32here. And inside this this video right
202. 7:34now, for instance, I'm not going to
203. 7:35reveal what IP address I'm connected to,
204. 7:38but there's a login page that is
205. 7:40exposing itself to the world. So, this
206. 7:43Danfos store view web, you can go to the
207. 7:46login page, and if you actually wanted
208. 7:48to get into it, well, I'm sure an
209. 7:51enterprising hacker in this case has
210. 7:53found their way through it, and now they
211. 7:54can modify whatever is connected to this
212. 7:57terminal. Now, obviously, we're not
213. 7:58going to hack into a Danfos storeview
214. 8:01web interface, okay? That would be very
215. 8:03much against the law, and law
216. 8:05enforcement agencies will take that very
217. 8:07seriously. All you can really do is
218. 8:10communicate to whoever is exposing this
219. 8:12to the world and tell them, uh, you
220. 8:14know, you should introduce them to the
221. 8:16technologies known as a [ __ ]
222. 8:17firewall. So, again, this is not like
223. 8:20the only issue, right? Obviously, there
224. 8:22are several thousand. In fact, some
225. 8:24people put it up to around 13,000
226. 8:27different controls exposed to the world.
227. 8:30Now, this is just the refrigeration.
228. 8:31This is not refrigerators, right? Each
229. 8:34of these controls could probably also
230. 8:36lead to several other refrigerators that
231. 8:39you can get access to. If you get into
232. 8:40the controls, you can affect whatever it
233. 8:43is controlling, right? That's basically
234. 8:45the gist of it. So, yeah, in a in a long
235. 8:48story short, it seems as though the
236. 8:50fridges are getting hacked. Okay? And
237. 8:52again, it's not just Dan Foss. You can
238. 8:54see that the largest effect actually
239. 8:56that happened today seems to have been
240. 8:59Copeland or Dixel Xeb, right? This is
241. 9:02the largest by the market share of
242. 9:04hackable devices. You've got the
243. 9:06Copeland site supervisor, the Corell
244. 9:09Peekow web. You've got all of the juicy
245. 9:11stuff here. And the thing is, this
246. 9:14wouldn't be that big of an issue if
247. 9:17these weren't exposed to the public
248. 9:18facing internet. And I'm also under the
249. 9:20assumption that a lot of the people that
250. 9:22have this exposed to the internet
251. 9:24anyways are also not intelligent enough
252. 9:26to be constantly updating these things
253. 9:28and making sure that whatever exploits
254. 9:31and vulnerabilities that exist are
255. 9:33stamped out as soon as possible. Okay?
256. 9:35It's not as simple as you and I, for
257. 9:38instance, might constantly be updating
258. 9:40our phones and computers and devices,
259. 9:42but have you ever had a family member
260. 9:44whose like iPhone you whip out and you
261. 9:45look at it and you think you go you go
262. 9:47back in time and you're like, damn, I
263. 9:49remember that iOS version from like 3
264. 9:51years ago and they really there are some
265. 9:54like I love my parents, but let me tell
266. 9:56you right now, there are sometimes where
267. 9:57I go there and I'm like, you have not
268. 9:59upgraded iOS versions for like 2 years,
269. 10:01okay? they don't really care because
270. 10:03they're just there to make calls, browse
271. 10:05the internet, and do whatever. You
272. 10:06should be updating your devices, right?
273. 10:08It's not a joke when I probably will
274. 10:10tell you that a lot of people, like a
275. 10:12lot of store managers probably don't go
276. 10:15through the extra efforts to fix this
277. 10:17[ __ ] right? And where it gets a little
278. 10:19bit wild too with this situation as well
279. 10:22is that, you know, as we're speaking,
280. 10:24there's been a huge push by various
281. 10:26countries like the United States, the
282. 10:28European Union, and Japan where they're
283. 10:31currently telling people that you should
284. 10:33probably start stocking up emergency
285. 10:36supplies for whatever reason, right? And
286. 10:38obviously, this is just good advice. I'm
287. 10:40a like, personally speaking, I like to
288. 10:43prep. I am a prepper in that regard. So,
289. 10:45I I always say if you can afford it,
290. 10:47definitely make sure you have enough
291. 10:49food, water, whatever the [ __ ] you may
292. 10:51need, ammunition for like a few days,
293. 10:54weeks, maybe months, because you never
294. 10:56know when [ __ ] hits the fan. And
295. 10:58ultimately, at the end of the day, when
296. 11:00you're the person that's taking care of
297. 11:01your family, you want to be able to take
298. 11:03care of them when [ __ ] hits the fan.
299. 11:05Okay? That's why I'm not afraid if
300. 11:07anything happens. I I I have the stuff
301. 11:09required in the current like, you know,
302. 11:12moment to be able to take care of
303. 11:13family. A lot of people don't. And it's
304. 11:16kind of scary when the food is perishing
305. 11:18around you because of cyber attacks and
306. 11:20the government's telling you to stock up
307. 11:21on like a few days worth of supplies,
308. 11:24right? At the very least. Some people
309. 11:26say it's a deliberate attempt to disrupt
310. 11:28our food supply chain and undermine
311. 11:30consumer confidence in it, right? And
312. 11:33the thing about it is, yeah, spoiling
313. 11:34anything like food, you know, people
314. 11:37will look at a fridge hack and go, is it
315. 11:39really that big of a deal? But when you
316. 11:40look at the long-term implications of
317. 11:42it, yeah, it could actually be pretty
318. 11:44bad. In fact, this wasn't even entirely
319. 11:47new over here. For instance, about back
320. 11:49in August of 2026,
321. 11:51this individual, Elizabeth, actually
322. 11:53writes a piece about the military
323. 11:56commissaries freezers possibly being
324. 11:58hacked. So, she thinks there's a nonzero
325. 12:01chance somebody hacked the commissaries
326. 12:03freezers, right? So basically the
327. 12:05refrigeration units owned by the US
328. 12:08military could possibly be hit. So she
329. 12:11brings up like a Facebook post from like
330. 12:13the US Army Fort Huakuka, which I hope I
331. 12:15pronounced that right. And basically
332. 12:17what they said is due to an overnight
333. 12:19equipment failure at their fort, all
334. 12:21freezers went into a defrost mode
335. 12:23similar to exactly what we kind of saw
336. 12:25over here where like, you know, they
337. 12:26decided to go into like that plus 50° C
338. 12:29mode. All frozen food was spoiled at
339. 12:31this time. There was no frozen food
340. 12:33items for sale until further notice. So
341. 12:35the army had this issue kind of happen,
342. 12:37right? One person goes, just say the
343. 12:39power went out and everything perished
344. 12:40and the army was like, "No, the power
345. 12:43actually didn't go out. So what actually
346. 12:45happened over here? Was the army hacked
347. 12:48in this regard?" And then she brings up
348. 12:49posts from like the Columbus Air Force
349. 12:51Base as well too. And then there's
350. 12:54several more as well too. Naval Island,
351. 12:56Newport, Rhode Island, right? Naval
352. 12:57Station here. And then of course like
353. 12:59the FE Warren Air Force Base. So, a lot
354. 13:01of these places started simultaneously
355. 13:03telling us that the refrigeration
356. 13:05systems were kind of getting hit. And
357. 13:07obviously, the blame here was kind of
358. 13:09put into the internet of things because
359. 13:11when you have [ __ ] that's connected to
360. 13:13the internet and people love the
361. 13:15convenience of I don't have to set every
362. 13:17single fridge. I can just like log into
363. 13:19a web interface and do something. Well,
364. 13:21guess what? It's not just you. It's
365. 13:24potentially anybody that has access to
366. 13:26that, you know, entire system, right?
367. 13:28That that's what it is. So just a quick
368. 13:30test in my like like an internet
369. 13:33connected like you know refrigeration
370. 13:36controller. You can see that obviously
371. 13:38the ones that are exposed to the
372. 13:40internet the model that I use the AI
373. 13:42tool obviously again do not actually
374. 13:45hack into anything like this. Do not
375. 13:48even try. Um this leave this to people
376. 13:51that know what they're doing. the
377. 13:52pentesters, the individuals that again
378. 13:55will look for the impact and then
379. 13:56rightfully report this over to the
380. 13:59organization that has exposed their
381. 14:01systems so they may rectify their fault.
382. 14:03And you can see that obviously the login
383. 14:06that's presentable isn't the main
384. 14:08concern. What's more serious is the
385. 14:11controller's API does not meaningfully
386. 14:14enforce authentication. An
387. 14:15unauthenticated attacker with network
388. 14:18access to a specific port can read
389. 14:21sensitive operational data and invoke
390. 14:23privileged write and credential change
391. 14:26functions. So more importantly over here
392. 14:29what they found is broken level
393. 14:30authorization on XML.CGI.
394. 14:34A large set of actions run with no
395. 14:36credentials at all. Read actions
396. 14:38disclose the user account list, the
397. 14:41store's name and street address, the
398. 14:43full device parameter table, internal IP
399. 14:46MAC addresses, directory listings,
400. 14:48device certificates, audit trails, alarm
401. 14:51history, the get file action in the
402. 14:54actual API that you call uh downloads
403. 14:57file contents unauthenticated, including
404. 14:59the controller's database archive, which
405. 15:02was found to create or contain a plain
406. 15:04text email SMTP credentials. set. So,
407. 15:08not a good situation, right? This should
408. 15:10be reported obviously, which I think
409. 15:13I'll probably end up doing after this
410. 15:15video at some point. I'll write up an
411. 15:16email to, you know, whoever this is. I'm
412. 15:19not going to leak out any information or
413. 15:21talk about it. But, yeah, it's a pretty
414. 15:23serious issue, right? Because again,
415. 15:25think about it from a larger
416. 15:27perspective, too, right? It's not just
417. 15:29stores and like supermarkets you have to
418. 15:31think about as well too. It's also a
419. 15:35scenario where things like hospitals
420. 15:37could be hit too. Now, hospital
421. 15:39standards are a lot higher. Their
422. 15:40controllers are definitely in most cases
423. 15:43kept away from the internet
424. 15:44connectivity. But for ransomware
425. 15:47targets, what's kind of insane is I
426. 15:48don't know if you knew about this, but
427. 15:50back in 2024, I would say one of the
428. 15:53largest organizations or one of the key
429. 15:55ones, One Blood was actually knocked
430. 15:57offline. These are people that, you
431. 15:59know, handle situations regarding human
432. 16:01blood. Human blood is very important.
433. 16:03It's supposed to be this thing that you
434. 16:05know if if you need a blood transfusion,
435. 16:08blood is like you need it. Okay, I'm not
436. 16:10a doctor. I can't [ __ ] explain it in
437. 16:12the best way possible, but blood comes
438. 16:14in obviously different types, you know,
439. 16:16there's different positivities,
440. 16:17different types, yada yada yada. Uh I
441. 16:19donate blood. And the thing is it's an
442. 16:21important thing to give blood because
443. 16:23when somebody needs it, they [ __ ]
444. 16:25need it. And if they don't get it, they
445. 16:27could possibly die. They could go into
446. 16:29there's a lot of things that can go
447. 16:31wrong, right? And unfortunately,
448. 16:33ransomware operators kind of do target
449. 16:34this. It's a very unethical target
450. 16:36simply because you should never really
451. 16:38be hitting hospitals and [ __ ] like that.
452. 16:40I mean, it's f there's a lot of
453. 16:41ransomware groups that will just like
454. 16:43cancel their attack. It's like, all
455. 16:44right, listen, we can hack like banks
456. 16:45and [ __ ] but like hospitals, what the
457. 16:48[ __ ] So basically ransomware targets
458. 16:51were kind of getting like hit or
459. 16:52ransomware targets like blood banks sort
460. 16:55of became the target at least in certain
461. 16:57cases. But imagine if the refrigeration
462. 17:01units on these systems were hit. Even if
463. 17:03you're in like a hospital or like a
464. 17:04medical facility, right? Ignore the
465. 17:07blood free uh the the blood freezers of
466. 17:09the fridges, right? The the the fridges
467. 17:12for that purpose. There's a whole litany
468. 17:14of other fridges that could even be
469. 17:16exposed, right? in like the hospital
470. 17:18pharmacy or like anything of that nature
471. 17:20that could be hit. And what's worse
472. 17:22about it too is in this case the hackers
473. 17:25were able to sort of bypass the alarms
474. 17:27in this case which basically what
475. 17:30happens over there is imagine if you are
476. 17:32in the hospital field right like food
477. 17:34when food goes bad we know it right but
478. 17:36imagine if you raise the temperature on
479. 17:38like a fridge that was holding vaccines
480. 17:41or blood then you would just be giving
481. 17:43people like you know blood that was
482. 17:44heated or vaccines that are ruined.
483. 17:46these things have to be kept at a very
484. 17:48specific temperature. So that's where I
485. 17:51think the real kind of fear sort of
486. 17:53comes into. And there's been a lot of
487. 17:55fingerpointing like, oh, is it Iran that
488. 17:57did it? And I don't know, it could be it
489. 17:59could be anybody, right? It could be a
490. 18:01group of hackers that just want to watch
491. 18:03the world burn. Or it literally could be
492. 18:05entire nation states like Iran, North
493. 18:07Korea who want to disrupt their, you
494. 18:10know, adversaries in whatever way
495. 18:12possible, right? Whether that be [ __ ]
496. 18:14up our food, whether that be hacking
497. 18:16into like power systems, whether that be
498. 18:19destroying the communications networks
499. 18:21that we rely on to share our
500. 18:23conversation. Like these are things that
501. 18:25obviously rely these are critical pieces
502. 18:28of infrastructure. And it's crazy that
503. 18:30now they're basically [ __ ] being
504. 18:31targeted and mass, right? So yeah, I
505. 18:34would consider the fridge hack to
506. 18:35obviously it sounds on paper like ah a
507. 18:37bunch of fridges got played. It sounds
508. 18:39like a [ __ ] prank to some people, but
509. 18:41uh for me it sounds like arguably a very
510. 18:44bad set of cyber attacks that can only
511. 18:47get worse the more it keeps going on.
512. 18:50Destroying the food supply that we rely
513. 18:52on to have order and [ __ ] seems like a
514. 18:55very very scary thing if it does keep
515. 18:58escalating. But thankfully in this
516. 19:00situation, it seems like people are
517. 19:02taking it seriously like at least the
518. 19:03cyber security people and the [ __ ]
519. 19:05law enforcement agencies involved. So
520. 19:07hopefully it doesn't escalate past this,
521. 19:09but who knows, man. We live in a wild
522. 19:11world, dog. I was going to bed last
523. 19:14night and they were talking about nukes
524. 19:15and [ __ ] apparently flying out in the
525. 19:17next couple days. So, you know what?
526. 19:19World can go burn down. I'm still going
527. 19:21to be talking about cool hacks and video
528. 19:23games and [ __ ] that interests me until
529. 19:26the goddamn nukes actually do go off.
530. 19:29Ladies and gentlemen, if you like what
531. 19:30you saw, please like, comment, and
532. 19:31subscribe. Dislike if you dislike it.
533. 19:33Let me know if you learned something. I
534. 19:35am