OrganisationIT

Dixell

Refrigeration controls brand owned by Copeland.

Dixell is Copeland's brand for refrigeration, air-conditioning, heating and retail control systems.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

Which Dixell XWEB generations remain exposed after support ended?

Timeline for Dixell

#15 12 Oct

Mentioned in: Fridge hack spoils food across Europe

Cybersecurity: Threats and Defences

View full timeline →

Follow Cybersecurity: Threats and Defences →

Background

Dixell is Copeland's electronics brand for refrigeration, air conditioning, heating and retail control systems. Its range includes parametric controllers, sensors, inverters and monitoring systems. Copeland Controls S.r.l. operates from Alpago in Italy, and Copeland now presents the brand as 'Dixell Electronics is now Copeland'. Copeland includes XWEB in that range for remote refrigeration monitoring. Copeland markets XWEB for supervision and monitoring of refrigeration systems used by retailers and facilities operators across commercial sites.

In October 2026, CERT-FR named Dixell XWEB among remote refrigeration controllers compromised across European supermarkets. The alert did not identify the precise model, entry method or attacker.

Common Questions

What is Dixell?

Dixell is Copeland's brand for electronic refrigeration, air-conditioning, heating and retail control systems.Source: Copeland

Who owns Dixell?

Copeland owns and operates the Dixell controls brand through Copeland Controls S.r.l. in Italy.Source: Copeland

Which Dixell product was named in the fridge attacks?

CERT-FR named Dixell XWEB remote refrigeration controllers but did not specify the model or entry method.Source: CERT-FR

How should operators protect Dixell xweb controllers?

CERT-FR says operators should take management interfaces off the public internet, inspect defrost schedules and restrict remote maintenance through a virtual private network.Source: CERT-FR

Source Material

CERTFR-2026-ALE-012: Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération End of software support for the XWEB EVO family Dixell: Industrial and Commercial Electronic Regulation and Control

How the World Sees Them

FirstVDS

There are no traces of the attack on the affected virtual servers

ESET

first documented case of Yggdrasil being abused in this way by a state-aligned threat actor

Cyber Security Agency of Singapore

Attackers are exploiting

Canadian Centre for Cyber Security

open-source reporting indicating that the vulnerability is being exploited in the wild

Ahold Delhaize (Frans Muller)

was caused by the malicious actions of others

ENISA

the manufacturer is not required to comply with the vulnerability handling obligations

CERT-FR (ANSSI)

probablement toujours en cours

ASOS

impersonating a trusted contact

Check Point

actively exploited on Spark Firewalls as of September 12, 2026

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.