Tech

Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 08/11/2026, 08:34:31 UTC.

Briefings

Coldframe is a Python honeypot designed to mimic real supermarket refrigeration controllers, specifically targeting Danfoss and Dixell interfaces. It successfully matched real device headers and TLS versions, allowing attackers to bypass login checks and access fake dashboards with defrost buttons. The system has been live for one day, attracting only generic scanners and Shodan crawlers, with no confirmed successful exploitation beyond the initial reconnaissance phase.

Key points

• Coldframe mimics real Danfoss AK-SM 800A and Dixell XWEB interfaces using Python code based on public research.
• The system successfully matches real device headers and TLS versions, enabling attackers to bypass login checks and access fake dashboards.

Context

Coldframe was built to test defenses against convincing fake devices inspired by recent industrial fridge installation events. It leverages existing research from Synacktiv, Claroty, and Ironhackers to create realistic decoys that mimic specific refrigeration controller brands.

Limitations

Evidence covers only one day of live testing. No confirmed successful exploitation beyond initial reconnaissance is reported. The system has not yet seen any confirmed successful exploitation beyond the initial reconnaissance phase.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 08/11/2026, 08:52:22 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeifxcxdj5ggk3wnp7abzudx2omcoy7zkzj4xmgemkhtg2vo676ga2u