COLDFRAME
Coldframe: A Specialized Honeypot Mimicking Supermarket Refrigeration Controllers
Designed to counter real-world attacks on internet-facing refrigeration supervisors across Europe, Coldframe simulates legacy controllers to trap and log threat actors.
Following security incidents where internet-exposed supermarket refrigeration supervisors were breached using default credentials and unpatched firmware to trigger unauthorized defrost cycles, a new defensive tool has emerged named Coldframe.
Consisting of a single Python file with zero external dependencies beyond the standard library, Coldframe successfully mimics industrial units like the Danfoss AK-SM 800A and Dixell XWEB EVO. By accurately replicating server headers, TLS configurations, and fake operational dashboards, the tool records every connection, credential attempt, and exploit deployment without exposing any real infrastructure.