GoKawiilDeveloper releases open-source honeypot mimicking supermarket fridge controllers
A new tool called coldframe, built as a single standalone Python file, impersonates Danfoss AK-SM 800A and Copeland/Dixell XWEB EVO refrigeration controllers to lure attackers. It replicates real device details like TLS settings, HTTP headers, login flows, and known exploit paths, logging credentials, exploit attempts and attacker actions without exposing any real system. The project follows reports of 2026 attacks in which hackers used default passwords and unpatched firmware to break into internet-facing refrigeration supervisors across Europe and trigger forced defrost cycles.