Cyber Experts Warn of 'Trojan Horse' Threat to US Critical Infrastructure

A cyberattack that crippled refrigeration systems in hundreds of French supermarkets, causing millions in losses, serves as a stark warning for American businesses and critical infrastructure, according to cybersecurity experts. The incident, which saw hackers raise temperatures in freezers to over 100 degrees Fahrenheit, leading to massive spoilage, highlights the growing threat to essential services.

John Walsh, senior vice president at software company IGEL, told Fox News Digital that similar attacks could affect various sectors in the U.S., including water supply and food distribution. "Think about if we don't have water for seven days, or if they attack freezers and we don't have food," Walsh said. "That's a tough situation for people to live through, and it could create a lot of economic and social unrest. We're seeing that we're vulnerable and that attacks are taking systems down."

Walsh, who works with companies like Siemens and Rockwell that build and deploy critical infrastructure systems, noted that much of the U.S.'s infrastructure relies on aging technology. "A primary obstacle in [operational technology] environments — whether in food manufacturing, pharmaceuticals, oil, or utilities — is that facilities operate assets that are 15 to 20 years old," he explained. "These systems are expensive, fragile, and essential to ongoing operations."

Many decision-makers are hesitant to upgrade these systems due to the complexity and potential disruption, adhering to a "if it's not broken, don't fix it" mentality. However, as critical infrastructure becomes increasingly integrated with digital technology, cybersecurity strategies must adapt.

"One of the big things we have to consider is that we're moving from a thought process of security to resilience," Walsh stated. He suggests that with the rise of sophisticated, AI-powered attacks, system operators should assume attackers are already present rather than striving for complete exclusion. "Resilience is where you make the assumption the attacker is present—where, when the attacker is present, you control the blast radius."

Experts like Walsh warn that a "Trojan horse" threat could already be embedded within America's electrical grid and other critical infrastructure, awaiting activation. The recent attacks in France are seen by some as practice for adversaries looking to hone their skills and methodologies against real targets. "They've demonstrated taking it down, which to some degree is them practicing, honing their skills, and honing their methodologies against real targets while sending a message," Walsh said.

Amy Kremer, chair of Humans First, expressed concern over the increasing connectivity of everyday devices, including household appliances and smart home systems. "I am shocked that appliances have access to the internet," Kremer told Fox News Digital. "I understand the convenience, but at the same time, you are going to have potential problems with it. That should be a concern to all Americans — not just appliances, but things like your Nest thermostat and other devices in your house that could be hacked into."

Walsh pointed to previous incidents, such as a 2026 coordinated cyberattack on Minnesota's water systems, as evidence of U.S. vulnerability. He emphasized that cyber threats to water and wastewater systems, as well as the food supply, could be employed to disrupt the U.S. economy or facilitate terrorism. "What would you do? You'd go after water and wastewater. You'd go after the food supply. Exactly what occurred here, but at a larger scale," Walsh stated.

He added that a pattern is emerging across the U.S., France, and the U.K., suggesting that adversaries might be practicing and demonstrating their capabilities in different locations. "We see the adversary—potentially a geopolitical adversary—basically practicing their art and demonstrating their art in different locations," Walsh warned. The article includes an image of empty refrigerators in a French supermarket following a cyberattack, illustrating the real-world impact of such incidents.