Regarding the Danfoss refrigeration systems hacked in France:
The username is `admin`, and the password automatically changes every day to... the current date.
Yes, today's date.
The French supermarkets affected in today's attacks had exposed all its refrigeration controllers directly to the internet.
Every single device reportedly used the same password: today's date...
There's also a documented authentication bypass: sending a POST request to /xml.cgi can bypass the login entirely.
Via: GossiTheDog