France attributes October supermarket refrigeration sabotage to Iran's IRGC-linked Shahid Kaveh unit
The French government has attributed to Iran a cyberattack that remotely raised the temperature of supermarket refrigeration systems in France in October, causing fires and food losses. Foreign Minister Jean-Noël Barrot blamed the Islamic Revolutionary Guard Corps (IRGC) and said Iran's ambassador had been summoned, with diplomatic measures and sanctions to be pursued with the EU. The Paris Prosecutor's Office requested international arrest warrants against the head of Shahid Kaveh, an offensive cyber unit linked to the IRGC, and two of its deputies (olhardigital.com.br). Per the article, the first attribution came from Le Figaro citing anonymous sources, and it is part of a wider wave: similar attacks hit supermarkets in Sweden, Ireland, the Netherlands, Estonia, Finland, Belgium and Luxembourg on 2 November, and bomb-threat hoaxes disrupted flights. The full national report and the prosecutor's statement could not be retrieved in this research, so the attribution rests on the government's public claims as reported by the press.
Detalhes técnicos
- Per the Al Jazeera report (aljazeera.com), investigators say the attackers used Farsi and IP addresses linked to devices located in Iran, gained internet access to the refrigeration systems and remotely pushed temperatures to 50 °C overnight.
- The French report, as summarised in search results from therecord.media, cites Farsi text artefacts, tooling and reconnaissance infrastructure, and names the unit's leadership in an annex. The full report was not opened during this research.
- The article does not describe the initial access vector, the exploited vulnerabilities or the specific malware used.
Remediação
- The article and the sources reviewed do not describe defensive measures for operators of refrigeration or industrial control systems. Operators of building and refrigeration OT should review internet exposure of these controllers and their remote-access paths, which is a general recommendation and not a finding from the sources.
Linha do tempo
-
France attributes October supermarket refrigeration sabotage to Iran's IRGC-linked Shahid Kaveh unit
ler a análise desta fonte ocultar
The French government has attributed to Iran a cyberattack that remotely raised the temperature of supermarket refrigeration systems in France in October, causing fires and food losses. Foreign Minister Jean-Noël Barrot blamed the Islamic Revolutionary Guard Corps (IRGC) and said Iran's ambassador had been summoned, with diplomatic measures and sanctions to be pursued with the EU. The Paris Prosecutor's Office requested international arrest warrants against the head of Shahid Kaveh, an offensive cyber unit linked to the IRGC, and two of its deputies (olhardigital.com.br). Per the article, the first attribution came from Le Figaro citing anonymous sources, and it is part of a wider wave: similar attacks hit supermarkets in Sweden, Ireland, the Netherlands, Estonia, Finland, Belgium and Luxembourg on 2 November, and bomb-threat hoaxes disrupted flights. The full national report and the prosecutor's statement could not be retrieved in this research, so the attribution rests on the government's public claims as reported by the press.
Technical Details
- Per the Al Jazeera report (aljazeera.com), investigators say the attackers used Farsi and IP addresses linked to devices located in Iran, gained internet access to the refrigeration systems and remotely pushed temperatures to 50 °C overnight.
- The French report, as summarised in search results from therecord.media, cites Farsi text artefacts, tooling and reconnaissance infrastructure, and names the unit's leadership in an annex. The full report was not opened during this research.
- The article does not describe the initial access vector, the exploited vulnerabilities or the specific malware used.
Remediation
- The article and the sources reviewed do not describe defensive measures for operators of refrigeration or industrial control systems. Operators of building and refrigeration OT should review internet exposure of these controllers and their remote-access paths, which is a general recommendation and not a finding from the sources.