# Coldframe offers decoy refrigeration controllers to record attacks

_Published Saturday, November 7, 2026 at 2:18 PM EST · Security · Latest · Tier 2 — Notable_

![Low-interaction honeypot for supermarket refrigeration controllers (Danfoss AK-SM 800A, Dixell XWEB 500) - hedgerow-dev/coldframe — Primary](https://opengraph.githubassets.com/3995f325fc6badd5a2b29128ed385d38e2d427c4a02aebd54c58197b5d22a7eb/hedgerow-dev/coldframe)

Coldframe offers a deployable decoy that imitates supermarket refrigeration controllers and records attempted logins, known exploits and control actions, according to its GitHub repository. The tool simulates Danfoss AK-SM 800A and Copeland/Dixell XWEB EVO devices, giving intruders fake dashboards and controls.

The software runs as a single Python file using only the standard library. It logs exploit payloads and drops them without executing commands or forwarding traffic. Its authors caution that interactions are shallow, some simulated responses use plausible values, and public code can let attackers identify the decoy.

## Sources

- [github.com](https://github.com/hedgerow-dev/coldframe)

---
Canonical: https://techandbusiness.org/newswire/ApwYKuqsZYHrSPzfjKvpgU
Published: 2026-11-07T19:18:03.014Z
Story chronology: 2026-11-07T17:27:30.000Z
Retrieved: 2026-11-08T06:08:22.867Z
Publisher: Tech & Business (techandbusiness.org)