France Blames Iran for Cyberattacks on Supermarket Fridges

France has formally attributed a concerted cyber operation against supermarket refrigeration systems to Iran’s Islamic Revolutionary Guard Corps (IRGC), following incidents on 11 and 12 October that affected about 700 sites and caused refrigerators to run hot.

French officials, including Foreign Minister Jean-Noël Barrot, described the attacks as unprecedented in scale and aggression and said a judicial investigation has been opened into the Shahid Kaveh cyber-offensive unit, linked to the IRGC’s Electronic and Cyber Center (IRGC-ECC). ANSSI, France’s cyber security agency, published an announcement naming the Shahid Kaveh unit and citing infrastructure characteristics, tools, and Persian-language traces as part of the attribution. Barrot also said sanctions would be imposed at the EU level and that the Iranian ambassador was summoned.

The article notes that the attribution relies on shared infrastructure, attack tools, and propaganda amplification, and highlights that European officials were discussing the broader implications of state-backed cyber sabotage. It also references prior Iranian-linked activity against French interests dating back to 2020, including a planned attack against Charlie Hebdo and other incidents tied to IRGC-linked groups.

Separately, the piece cites a 5 November joint US briefing by CISA, the FBI and partners outlining several techniques used against industrial refrigeration controllers—bypassing authentication, injecting code, and weak settings—along with recommended mitigations such as keeping devices off the internet, applying firmware updates, network segmentation, strong access controls, and logging.

The article stresses careful interpretation of government attributions and notes that ongoing investigations and broader attribution remain uncertain for related European incidents.