新一波針對超市冰箱的網路攻擊席捲歐洲

瑪麗・曼尼斯、海倫・里德與路易絲・拉斯穆森報導By Marie Mannes, Helen Reid and Louise Rasmussen

斯德哥爾摩／布魯塞爾／倫敦，11 月 2 日（路透社）—— 針對歐洲超市的駭客攻擊週一蔓延整個歐洲大陸，從瑞典到比利時的冰箱與冷凍櫃都受波及，迫使商店丟棄食品。這起事件令人聯想到上月法國發生的類似攻擊。STOCKHOLM/BRUSSELS/LONDON, Nov 2 (Reuters) - A hacking attack on European supermarkets spread across the continent on Monday, hitting fridges and freezers from Sweden to Belgium and forcing stores to throw away food in an incident that echoed a similar attack in France last month.

這起攻擊使數十家門市的冷藏與冷凍設備溫度升高，受害者包括比利時與盧森堡的超市集團阿霍德德爾海茲（Ahold Delhaize）和科爾呂特（Colruyt），以及瑞典雜貨零售商 ICA 和 Coop。從家具到肉丸都賣的零售商 IKEA 也至少有一家門市受影響。The attack, which raised temperatures in refrigerator and freezer units at dozens of stores, hit supermarket groups Ahold Delhaize and Colruyt in Belgium and Luxembourg, as well as Swedish grocers ICA and Coop. Furniture-to-meatballs retailer IKEA also saw at least one store affected.

斯德哥爾摩一家 ICA 加盟店的銷售經理恩格拉・英瓦爾（Engla Ingwall）週一在路透社到訪該店時表示：「所有東西都毀了。」她並補充說，攻擊發生在凌晨 2 時（格林威治時間 0100），但數小時後才被發現。"Everything is destroyed," Engla Ingwall, sales manager at an ICA franchise store in Stockholm, told Reuters during a visit to the store on Monday, adding the attack occurred at 2 a.m. (0100 GMT) but was only noticed hours later.

「發生了網路攻擊，我們所有冷凍櫃都達到攝氏 50 度。」"There has been a cyberattack and all our freezers reached 50 degrees (Celsius)."

未上市公司 ICA 的一名發言人表示，公司知道「少數門市受到隔夜事件影響，該事件衝擊其冷藏與冷凍系統」。A spokesperson for privately held ICA said the company was aware that a "limited number of stores were affected by an incident overnight, which impacted their refrigeration and freezer systems".

最新事件發生前，法國上月也曾遭遇攻擊。當時警方表示，駭客奪取數百家超市冷卻設備的控制權，引發火災並造成食品損失。阿霍德上月也曾向警方通報一起資安事件。The latest incidents follow an attack in France last month when police said hackers seized control of cooling units at hundreds of supermarkets, causing fires and food losses. Ahold also reported a cybersecurity incident to police last month.

雖然尚無人宣稱對任一攻擊負責，但在俄羅斯 2022 年入侵烏克蘭後，安全緊張升高，這些事件已加深歐洲當局對基礎設施面臨混合威脅的憂慮。While no one has claimed responsibility for either attack, the incidents have heightened concerns among European authorities about hybrid threats to infrastructure amid growing security tensions since Russia's 2022 invasion of Ukraine.

莫斯科一再否認涉及破壞行動或混合戰行動。路透社無法確認週一攻擊的幕後黑手，也無法確認這些攻擊是否與法國事件有關。Moscow has repeatedly denied involvement in sabotage or hybrid warfare operations. Reuters could not establish who was behind Monday's attacks or whether they were linked to the incidents in France.

比利時網路安全中心（Centre for Cybersecurity）發言人卡翠恩・艾格斯（Katrien Eggers）表示：「目前不知道這起攻擊的幕後黑手是誰，也可能永遠無法查明。」她並補充說，她對事件數量增加感到憂心，部分原因與 AI 有關。"It is not known who is behind this attack, and it may never be determined," said Katrien Eggers, spokesperson for Belgium's Centre for Cybersecurity, adding she was concerned about the growing number of incidents, in part due to AI.

她說：「所有 IT 系統都可能存在漏洞，而 AI 現在可被用來成功利用這些弱點——尤其是由技術高超的行為者使用時。」"All IT systems are potentially vulnerable, and AI can now be used to successfully exploit these weaknesses — especially by sophisticated actors," she said.

「零售業是容易下手的目標」'RETAIL IS AN EASY TARGET'

從冰箱、暖氣系統到監視器與警報器，過去多半屬於機械式的設備，如今越來越多可被遠端監控與控制，為網路犯罪分子創造新的機會。From refrigerators and heating systems to security cameras and alarms, an expanding range of devices once largely mechanical can now be monitored and controlled remotely, creating new opportunities for cybercriminals.

週一受影響的冷藏設備中，至少有部分使用丹麥公司丹佛斯（Danfoss）的溫控技術；該技術也曾在法國攻擊中遭鎖定。丹佛斯表示，公司一直與客戶合作實施修補措施。At least some of the refrigerator units affected on Monday used temperature control technology from Danish firm Danfoss that was also targeted in the French attack. The firm said it had been working with customers to implement fixes.

歐盟執委會表示，最新事件凸顯數位威脅正變得越來越具破壞性。The European Commission said the latest incidents highlighted how digital threats are becoming increasingly disruptive.

歐盟農業執委克里斯多夫・漢森（Christophe Hansen）表示：「這是蓄意試圖擾亂我們的食品供應鏈，並削弱消費者對其信心——這是我們必須嚴肅看待的警訊。」「這類網路攻擊一再發生，令人深感憂慮。」"They are a deliberate attempt to disrupt our food supply chain and undermine consumers' confidence in it – a warning that we must take seriously," said EU commissioner for agriculture Christophe Hansen. "The repeated occurrence of these cyberattacks is deeply concerning."

科爾呂特集團發言人表示，旗下以加盟制在比利時經營 Spar 門市的科爾呂特集團，有 5 家店的冰箱系統遭攻擊。A spokesperson for Colruyt Group, which operates Spar stores in Belgium under a franchise system, said five shops had their fridge systems attacked.

在愛爾蘭，批發商 Musgrave 表示，這起事件影響其 13 家 SuperValu 門市的系統，迫使公司將部分冷藏與冷凍商品下架。In Ireland, wholesaler Musgrave said the incident affected systems in 13 of its SuperValu stores, forcing it to remove some chilled and frozen products from sale.

該公司在聲明中表示：「我們的監控系統提醒我們注意到這個問題，我們立即採取行動。」「我們的調查仍在進行。」"Our monitoring systems alerted us to the issue and we took immediate action," it said in a statement. "Our investigation is ongoing."

資安公司 SentinelOne 研究員湯姆・赫格爾（Tom Hegel）表示，這類攻擊通常與勒索、政治動機或民族國家行動有關；近期案例中沒有金錢要求，反而指向破壞行動。Tom Hegel, a researcher at cybersecurity firm SentinelOne, said such attacks were typically linked to extortion, political motives or nation-state operations, with the absence of financial demands in recent cases pointing instead to sabotage.

他說：「零售業是容易下手的目標，因為零售連鎖業者營運龐大的冷藏控制器、建築管理系統、門禁面板與銷售時點設備。」他並補充說，追查鎖定這類系統的駭客相當困難。"Retail is an easy target because retail chains run enormous estates of refrigeration controllers, building management systems, door access panels and point-of-sale gear," he said, adding it was hard to trace hackers targeting such systems.

「登入外露控制面板的攻擊者幾乎不會留下任何痕跡……從防禦者一方來看，一名青少年與一個情報機構看起來會差不多。」"An attacker who logs into an exposed control panel leaves almost nothing behind … A teenager and an intelligence service would look much the same from the defender's side."

「非常可怕」'IT'S VERY SCARY'

家樂福（Carrefour）在上月法國攻擊中受創嚴重。該公司表示，其在比利時 700 家門市中有 15 家受影響。IKEA 表示，比利時有一家門市受到影響，且無法排除其他地點出現中斷的可能。Carrefour, which was badly hit in last month's French attack, said 15 of its 700 stores in Belgium were affected. IKEA said one store in Belgium had been impacted and that it could not rule out disruptions at other locations.

未上市瑞典雜貨連鎖業者 Coop 表示，其 800 家門市中有 7 家受到一起網路事件影響，事件涉及未經授權竄改其冷藏系統。該公司表示，丹佛斯是其供應商之一。Privately held Swedish grocery chain Coop said that 7 of its 800 stores were affected by a cyber incident involving unauthorised tampering with its refrigeration systems. It said Danfoss was among its suppliers.

比利時肉品店連鎖 De Laet & Van Haver 創辦人兼老闆呂克・德拉特（Luc De Laet）表示，他在凌晨 3 時 30 分被一名員工叫醒，對方告訴他發生問題。他趕到安特衛普南方的門市，發現冰箱溫度被調高到攝氏 18 度。Luc De Laet, founder and owner of Belgian butchery chain De Laet & Van Haver, said he was woken at 3:30 a.m. by an employee telling him there was a problem. He rushed to his store south of Antwerp and found the fridges turned up as high as 18 C.

他估計，這起事件毀掉約 1.5 萬歐元（1.68 萬美元）價值的肉品。He estimated the incident ruined about €15,000 ($16,800) worth of meat.

他告訴路透社：「這非常可怕。他們正在入侵負責記錄溫度的系統，而且可以遠端設定。」他並補充說，必須丟掉這麼多食物令人惱火。"It's very scary. They are hacking the system that is doing the registration of the temperature, and they can program it at a distance," he told Reuters, adding that it was infuriating to throw away so much food.

德拉特表示，他認為駭客試圖破壞歐洲經濟穩定。他已聯絡警方，但不知道是否已展開調查。De Laet said he believed the hackers were trying to destabilise European economies. He had contacted police but did not know whether an investigation had been launched.

他說：「我只有兩個字要送給他們：拜託，醒醒吧，因為有事情正在發生。」"I only have two words for them: wake up, please, because there's something going on," he said.

（1 美元 = 0.8948 歐元）($1 = 0.8948 euros)

（安娜・林斯特倫、瑪麗・曼尼斯、路易絲・拉斯穆森與約翰・阿蘭德於斯德哥爾摩報導，海倫・里德於倫敦報導；帕德雷克・哈爾平於 Dubin，雷歐・馬沙東、英蒂・蘭道羅與夏洛特・范・坎彭豪特於布魯塞爾，多米尼克・維達隆於巴黎，特耶・索爾斯維克於奧斯陸補充報導；亞當・喬丹與約瑟芬・梅森撰稿；柯絲汀・多諾文、詹・哈維與馬克・波特編輯）(Reporting by Anna Ringstrom, Marie Mannes, Louise Rasmussen and Johan Ahlander in Stockholm, and Helen Reid in London; Additional reporting by Padraic Halpin in Dubin, Leo Marchadon, Inti Landauro and Charlotte Van Campenhout in Brussels, Dominique Vidalon in Paris and Terje Solsvik in Oslo; Writing by Adam Jourdan and Josephine Mason; Editing by Kirsten Donovan, Jan Harvey and Mark Potter)