While they were not able to pinpoint a group yet, the number of actors that fit this bill is relatively small. The bulletproof hosting seen being used by these actors for probing was also being used by Russian groups some time ago.
Similar incidents were reported in France last month. The attack on French supermarket fridges involved legacy technology connected to the internet with default passwords.
Cybersecurity experts reported that attacks on dummy fridge controls, deliberately placed online to lure would-be hackers, displayed characteristics similar to malicious operations linked to Russia.
One UK supply company saw its cold units rise to as high as 100C (212F). Two others reported that their units had started to defrost.
The industry body said no meat had been lost in the refrigeration hacks. It described the incidents as a reminder to all in the food industry, at whatever point in the supply chain they are, that their businesses may be seen by some as targets. He said the NCSC was not able to comment on who might have carried out the attacks. The attacks were not AI-enabled and had used vulnerabilities that had been out there for a long period of time.
Cybersecurity experts said the incidents had a minimal effect but may represent the foothills of a wider threat.