Anwar

TM started to hijack request over DoH (DNS over HTTPS), DoT (DNS over TLS), and hijack response. Malaysia great firewall! Have to option in for less common public DNS or use private DNS with unique personal url.

I’ve worked in commercial refrigeration for 20 years and have been seeing a lot of comments asking why freezers and coolers are connected to the internet, and how they could get this warm. A bit of context: Commercial refrigeration has used DDC (Direct Digital Control) and BAS (Building Automation System) platforms for decades. These systems continuously monitor temperatures, pressures, and equipment status. If a freezer fails at 11 p.m., they automatically alarm and dispatch a technician before product is lost. Across grocery stores and cold storage facilities, this prevents billions of dollars in food loss every year. They also let technicians remotely diagnose and fix issues before they become failures. What appears to have happened here is that the attackers forced the cases into a prolonged defrost cycle instead of simply turning them off. In freezers, defrost normally uses electric heaters or hot-gas defrost for 10 to 15 minutes every few hours (or as needed by sensors) to clear ice off the evaporator. In coolers it’s usually just stopping the refrigerant flow while the fans run. These cycles are short and controlled so the product stays in a safe temperature range. If someone overrides that and leaves the heaters or hot gas running, temperatures climb quickly, which matches the 50 °C reports. It’s fair to ask whether these systems should be online. In practice, modern grocery and industrial plants are too complex to operate without remote monitoring and control. Removing that connectivity would raise food costs and increase spoilage. These platforms are normally locked down with multiple layers of security; seeing them successfully attacked at this scale is genuinely concerning. Hope that helps explain how something like this can happen.