Cyberattacks on Supermarket Freezers Signal a New Front in Modern Warfare: Why Bangladesh Should Be Concerned

A supermarket freezer suddenly reached a temperature of 112 degrees Fahrenheit, but no alarm went off. Before employees could recognise the danger, food products worth several million euros had been destroyed.

Initially, the incident appeared to be a routine mechanical failure. However, an investigation revealed a different reality: a cyber intrusion into an internet-connected refrigeration control system.

Similar attacks subsequently targeted supermarkets in several European countries. Even France's national blood service, the French Blood Establishment (EFS), came under attack. Fortunately, an alternative alarm system was activated, allowing technicians to intervene before any blood products were damaged.

These incidents point to a fundamental shift in the nature of modern warfare. Launching missiles, conducting airstrikes or sending troops across borders is no longer the only way to inflict serious damage on an adversary. Gaining access to the control systems of electricity networks, water supplies, food storage facilities, hospitals, blood banks and transportation systems can also trigger devastating consequences.

This is more than ordinary cybercrime. When planned and executed at the state level, such operations can become a strategic tool for attacking an adversary's economy, public health, social confidence and institutional capacity.

This is the central argument of a widely discussed report by security expert Olivier Knox. He illustrates how the new frontlines of modern warfare are no longer confined to traditional battlefields. They now extend into supermarket freezers, hospital medicine storage facilities, water treatment plants and even military food supply systems.

Such attacks are not limited to wartime operations. They can also be used to destabilise rival countries or put political governments under pressure. In Bangladesh, discussions about possible sabotage targeting the country around December have raised concerns about similar threats. Intelligence reports have also reportedly expressed concerns about possible foreign involvement in such activities.

Against this backdrop, the incidents described above carry particular significance for Bangladesh.

The country is rapidly expanding its digital economy, e-governance, online banking, digital payments, industrial automation and internet-dependent services. However, as digital infrastructure expands, questions are increasingly being raised about whether security arrangements are keeping pace.

Bangladesh's cyber risks are not limited to government websites being hacked or banking information being stolen. A successful attack on the operational control systems of critical infrastructure could have far-reaching consequences.

Several sectors deserve particular attention.

1. Electricity and Energy Infrastructure

Power plants, the national electricity grid, substations, gas distribution networks and different stages of energy supply increasingly depend on digital control technologies.

These systems use Supervisory Control and Data Acquisition (SCADA) and other industrial control technologies.

If a critical control system is compromised, electricity generation, distribution or energy supplies could be disrupted.

There are two major dimensions to this threat. The first is the direct disruption of operations. The second involves manipulating information within control systems, potentially leading operators to make incorrect decisions.

A major disruption in the power sector could affect industrial production, hospitals, water supplies, telecommunications, banking and transportation.

For an economy like Bangladesh's, which depends heavily on uninterrupted electricity and energy supplies, this risk deserves serious attention.

2. Food Storage and Cold-Chain Infrastructure

Cold-chain systems are essential for preserving fish, meat, dairy products, fruits, frozen foods, vaccines and medicines in Bangladesh.

A cold chain refers to the continuous storage and transportation of products at specific temperatures from production to consumption.

Its key components include:

• Cold storage facilities and warehouses.
• Food processing plants.
• Fish and meat storage facilities.
• Pharmaceutical warehouses.
• Vaccine storage systems.
• Temperature-controlled warehouses at seaports and airports.

If the control systems of these facilities are connected to the internet without adequate security, they may become vulnerable to cyberattacks.

An attack on food storage infrastructure could cause not only substantial financial losses but also disruptions to food supplies, market prices and public health.

However, there is currently no verified evidence presented here that such attacks have already occurred at Bangladesh's cold storage facilities or food warehouses. The issue should therefore be treated as a potential vulnerability requiring preventive measures.

3. Hospitals, Blood Banks and Medicine Supply Chains

The incident involving France's EFS offers an important lesson for Bangladesh's healthcare sector.

Temperature control and digital monitoring systems are essential for public and private hospitals, blood banks, diagnostic centres and pharmaceutical storage facilities.

A failure in the temperature-control system of a hospital blood bank could disrupt emergency surgery, maternity care, treatment of accident victims and other critical medical services.

Cybersecurity alone is not enough. Healthcare facilities must also maintain backup arrangements.

Independent temperature sensors, alternative alarm systems and manual controls should remain operational so that potential dangers can be detected even when digital control systems are compromised.

4. Ports, Seaports and Supply Chains

Chattogram, Mongla and Payra ports are important gateways for Bangladesh's international trade.

Digital technologies are increasingly used in import-export operations, container management, customs clearance, vessel movements and cargo transportation.

A cyberattack on these systems could do more than disrupt port operations. It could affect imports and exports, industrial raw material supplies, food imports and export earnings.

If a major port remains paralysed for several days, the consequences could spread beyond its immediate boundaries, affecting banking, insurance, transportation, industries and foreign trade.

5. Banking and Financial Infrastructure

Bangladesh's banking sector has become increasingly dependent on digital transactions, online banking, cards, mobile financial services and interbank payment systems.

The infrastructure supporting these services includes:

• Internal banking networks.
• Payment and settlement systems.
• Data centres.
• ATM and card networks.
• Third-party technology providers.
• Backup and disaster recovery systems.

The consequences of cyberattacks on the banking sector are not limited to financial theft.

If public confidence in the reliability of financial transactions is undermined, trust in the wider financial system could also suffer.

One particular concern is the use of common technology providers by multiple institutions. A vulnerability in a shared service provider could potentially expose several organisations to risk.

Why Would a Freezer Become a National Security Target?

Cyberattacks are generally associated with financial data theft, government website disruptions, personal information leaks or ransomware operations.

However, the expansion of the Internet of Things (IoT) and Operational Technology (OT) has fundamentally changed the nature of cyber threats.

IoT refers to networks of physical devices and sensors connected to the internet. OT, meanwhile, consists of technologies that monitor and control physical equipment, industrial processes, temperature, pressure, electricity flows and other operational activities.

A modern supermarket refrigeration system is no longer simply a combination of compressors and thermostats.

It may include digital temperature controllers, remote monitoring software, automated alarm systems, central management servers, remote access for maintenance contractors and digital inventory management platforms.

If attackers gain access through a vulnerable component, they may be able to do more than view information. They could potentially interfere with the operation of physical equipment.

In conventional information technology (IT) systems, cyberattacks often result in data loss or service disruption.

In OT environments, however, the same type of intrusion can cause physical damage, halt production, destroy food supplies, create risks of water contamination or even endanger human lives.

Attack Methods: Exploiting Management Weaknesses Rather Than Sophisticated Technology

One of the significant aspects of Olivier Knox's report is its suggestion that the attackers did not necessarily need highly sophisticated cyber weapons.

According to observations by researchers at Palo Alto Networks' Unit 42, the attacks exploited weaknesses in control systems exposed to the internet.

Three vulnerabilities are particularly important:

1. Unpatched control systems

When a software or hardware vulnerability is discovered, manufacturers generally release security updates or patches.

However, if organisations fail to install these updates regularly, known vulnerabilities remain exposed.

2. Direct internet exposure

Control systems that should only be accessible through an organisation's internal network can become vulnerable when they are directly exposed to the internet.

This creates opportunities for remote attackers to gain unauthorised access.

3. Default passwords

If organisations fail to replace manufacturers' default passwords, attackers may be able to gain access using widely known credentials.

These weaknesses highlight an important reality: cyber risks often emerge not simply because technology is too advanced, but because basic security practices are neglected.

Food and Medicine Supply Chains Are Now Strategic Infrastructure

At first glance, targeting a freezer may appear unusual.

From a national security perspective, however, food and medicine storage systems are critically important.

A country's food security does not depend solely on agricultural production. It also relies on the storage, transportation, warehousing, wholesale markets, supermarkets and retail distribution of food products.

Disruptions at any point in this chain can have consequences for the wider economy and public welfare.

The same applies to medicines, vaccines and blood products, where temperature control is essential for maintaining safety and quality.

Hybrid Warfare: Weakening an Adversary Without Declaring War

The concept of hybrid warfare is important for understanding these developments.

Hybrid warfare involves the combined use of conventional military force, cyberattacks, economic pressure, information warfare, psychological operations, political divisions, sabotage and diplomatic pressure.

In the case of Iran, French authorities have reportedly attributed supermarket attacks to external actors. Russia has also faced various allegations involving cyber operations.

However, identifying the perpetrators of individual incidents requires careful investigation.

There are generally three possible categories of actors:

• State-directed operations: Intelligence or military agencies of a country directly plan and execute cyber operations.
• State-supported proxy operations: Hacker groups operate in the interests of a state or receive indirect assistance without necessarily being under its direct control.
• Independent criminal groups: Cybercriminals carry out attacks for financial gain, ransom, destructive purposes or political propaganda.

Distinguishing between these categories is essential before assigning responsibility to any country or organisation.

Three Possible Scenarios for Future Warfare

Three potential scenarios can help explain the evolving security environment.

Scenario 1: Limited sabotage (Low to moderate-level crisis)

A cyberattack targets the control systems of several supermarkets, food warehouses or industrial facilities in a country.

The financial damage may be limited, but the incidents could generate public anxiety and trigger major investigations.

Scenario 2: Coordinated infrastructure attacks (High-level crisis)

Multiple attacks target electricity, water, food storage, hospitals and transportation systems simultaneously.

Disruptions in one sector could create cascading consequences for other essential services.

Scenario 3: Cyber preparations before military conflict (Extremely high strategic risk)

Before a potential military confrontation, attackers identify vulnerabilities in an adversary's communication, electricity, transportation, supply chains and administrative systems.

Such preparations could create opportunities to disrupt critical services during a subsequent crisis.

What Bangladesh Should Do: Cybersecurity Must Become Part of National Defence

According to an unnamed security expert in Dhaka, one of Bangladesh's biggest challenges is the tendency to treat cybersecurity solely as the responsibility of information technology departments.

A broader national approach is necessary.

Several measures deserve urgent consideration:

1. Identify critical digital infrastructure: Prepare a comprehensive inventory of control systems used in electricity, gas, water, ports, banking, hospitals, food warehouses and medicine supply chains.
2. Separate IT and OT networks: Establish strong security boundaries between office computer networks and networks controlling physical equipment and industrial operations.
3. Conduct regular cybersecurity audits: Identify internet-exposed devices, outdated software and other vulnerabilities through routine security assessments.
4. Strengthen national cyber monitoring: Improve information-sharing and early-warning mechanisms among government agencies and relevant institutions.
5. Ensure continuity of essential services: Develop the capacity to maintain emergency operations even when digital systems are compromised.
6. Conduct national cybersecurity exercises: Organise joint exercises involving the military, police, healthcare authorities, electricity departments and other relevant sectors.
7. Invest in technological sovereignty and skilled personnel: Alongside the use of foreign technologies, Bangladesh needs domestic expertise to assess, monitor and secure those systems.
8. Establish minimum cybersecurity standards: Introduce enforceable security requirements and accountability mechanisms for organisations operating critical infrastructure.

Final Assessment: The New Frontline of Warfare Is Inside Civilian Life

The most significant message of Olivier Knox's report is that it highlights a changing reality in modern warfare.

In the past, military targets primarily included armed forces, military bases, airports and naval facilities.

Today, the list has expanded to include infrastructure that ordinary citizens would rarely associate with warfare.

A freezer, a water treatment plant, a hospital blood storage facility or a food warehouse can all become critical national security targets.

For a developing country like Bangladesh, this reality carries profound implications, particularly amid concerns about potential sabotage and political instability.

Border security, military preparedness and intelligence capabilities remain essential. However, protecting the country's digital infrastructure is now equally important.

In future conflicts, a country may not necessarily suffer defeat through the loss of territory alone. Losing control over its electricity, water, food, healthcare and financial systems could also leave the state strategically crippled.

The critical question is whether Bangladesh is adequately prepared for this emerging security challenge.