It is pretty amazing that there are so many stores affected by this attack. You would expect a number of manufacturers, different management systems, different networks, gateways etc that would limit the scope and increase the difficulty of mounting an attack of this scale. There must be a common vector in this.
It was a third-party monitoring system and company (Danfoss). Outdated firmware was the vector. They manage many different stores and thus are the common thread.
I read that and thought outdated firmware would still be difficult to target unless it was the Danfoss hub that was targeted which makes the firmware a more iffy proposition.
It is pretty amazing that there are so many stores affected by this attack. You would expect a number of manufacturers, different management systems, different networks, gateways etc that would limit the scope and increase the difficulty of mounting an attack of this scale. There must be a common vector in this.
It was a third-party monitoring system and company (Danfoss). Outdated firmware was the vector. They manage many different stores and thus are the common thread.
I read that and thought outdated firmware would still be difficult to target unless it was the Danfoss hub that was targeted which makes the firmware a more iffy proposition.