Internet-connected household appliances, including refrigerators, heating systems and security cameras, are increasingly vulnerable to cyberattacks, raising concerns about the security of everyday devices.
In October, a retailer reported an earlier cybersecurity incident to Dutch police, coinciding with a cyberattack in France that caused refrigerators and freezers at hundreds of stores to heat up to 50°C overnight. The incident reportedly resulted in fires and food spoilage.
As more traditionally mechanical appliances become connected to the internet, users can increasingly monitor and control them remotely. However, this connectivity also creates potential entry points for cybercriminals.
Any device connected to the internet, either directly or through a mobile application, cloud service or home network, could potentially be compromised.
In 2015, cybersecurity researchers demonstrated at a hacking conference in Las Vegas how a Samsung smart refrigerator could be compromised, allowing attackers to intercept some of the internet traffic passing through the appliance.
In most cases, cybercriminals are more interested in stealing information, disrupting services or exploiting connected devices to gain access to larger networks rather than simply taking control of household appliances.
Devices that connect to the internet and can be controlled remotely are among the most common potential targets. These include security cameras, video doorbells, alarm systems, smart locks, thermostats and central heating systems.
Smart household appliances, such as refrigerators, ovens and washing machines, may also be exposed to cyber threats if they are connected to the internet. Even some modern toothbrushes now feature internet connectivity.
According to cybersecurity industry data, routers account for more than three-quarters of attacks targeting connected devices.
The rapid growth in the number of internet-enabled products has increased the potential attack surface, as manufacturers continue adding connectivity features to appliances that previously operated independently.
Once attackers gain access to a connected device, they can generally use it to collect information or take control of its functions.
A compromised security camera could provide access to live footage inside a home, while devices equipped with microphones could potentially be used to record conversations. An infected router may also expose information transmitted across the household network.
Hackers who gain control of an appliance may be able to switch it on or off, change its settings or prevent users from accessing their accounts.
A compromised thermostat could disrupt heating systems, while a hacked refrigerator or freezer could have its temperature controls manipulated, potentially damaging stored food.
In more serious cases, attackers may exploit vulnerable devices to enter other systems connected to the same network or obtain personal information associated with online accounts.
Cybersecurity researchers have repeatedly demonstrated vulnerabilities in internet-connected vehicles.
In 2015, researchers remotely gained control of a moving Jeep through its internet-connected entertainment system. The incident led to the recall of approximately 1.4 million vehicles and the introduction of software updates to address the security flaws.
Almost a decade later, researchers disclosed another vulnerability that could allow certain Kia vehicles to be tracked, unlocked and started using only their registration plate numbers.
The researchers said they reported the security flaws to Kia, which addressed them within months. There was no evidence that the vulnerabilities had been exploited in actual attacks.
Modern vehicles and aircraft also incorporate extensive safety features and backup systems designed to reduce the risks associated with technical failures and cyber threats.
Critical infrastructure, including electricity and water networks, generally operates with multiple layers of security, monitoring and regulatory oversight that are not commonly found in consumer appliances.
Although these systems are not immune to cyberattacks, they are generally more difficult to compromise than household devices connected to a home Wi-Fi network.
Cybersecurity experts recommend several basic measures to reduce the risk of attacks on internet-connected appliances.
Users should replace default passwords with strong, unique ones, enable two-factor authentication where available and regularly install software updates.
Consumers should also consider replacing devices that no longer receive security updates. Keeping connected appliances on a separate local network and avoiding unnecessary internet connections can further limit potential exposure.
Experts say consumers should connect devices to the internet only when their online features are genuinely needed.
Ultimately, reducing the number of connected devices and maintaining basic security practices can help minimise potential entry points for cybercriminals.
