France accuses Iran’s Revolutionary Guards of supermarket fridge cyberattacks
Paris summons Tehran’s envoy and seeks EU sanctions after hackers overrode refrigeration units at 700 sites, starting at least 15 fires....
Paris summons Tehran’s envoy and seeks EU sanctions after hackers overrode refrigeration units at 700 sites, starting at least 15 fires.
France has accused Iran’s Islamic Revolutionary Guard Corps (IRGC) of carrying out the cyberattacks that sent temperatures soaring in fridges and freezers at supermarkets across the country last month. Paris has threatened European sanctions in response.
Foreign Minister Jean-Noël Barrot said on Monday that the attack was “unprecedented in both its scale and its level of aggression”. He said France would “implement sanctions at the European level against all those responsible for this attack”.
“It marks the first large-scale cyberattack aimed at sabotage on our national territory, and it constitutes a major attack on the nation’s interests and the security of the French people,” Barrot said.
The Iranian ambassador was summoned to the foreign ministry to receive what Barrot called “a very strong protest against this extremely grave act”. He added that France would take “any other necessary and proportionate measures” to respond and to “deter anyone who might seek to repeat it”.
Iran has not yet responded. Its mission to the United Nations did not reply to messages seeking comment. Tehran routinely denies carrying out malicious cyber operations.
France made its announcement minutes after Reuters reported that investigators privately suspected Iran of being behind the attacks.
Also on Monday, Paris prosecutor Laure Beccuau said an investigation had been opened into the head of an offensive cyber unit linked to the IRGC and his two deputies.
She named the unit as Shahid Kaveh, which she said was affiliated with the IRGC’s electronic and cyber centre.
A joint report by France’s intelligence and cyber agencies named three alleged associates of the unit: Hamid Reza Lashgarian, Mahdi Lashgarian and Reza Salarvand. The report included their photographs. Reuters could not immediately find contact details for the men.
According to the report, the hackers operated through several front groups posing as vigilante hackers, including “CyberAveng3rs” and “Cyber Isnaad Front”.
The report said investigators connected Shahid Kaveh to the hacks in three ways. They tied the incidents to the digital infrastructure used to sabotage the fridges. They matched the pattern of the intrusions to other hacks by the unit. And they found traces of Farsi in the attack infrastructure.
Reuters could not establish exactly how French authorities reached their conclusion. Attributing cyberattacks is notoriously difficult, because hackers can conceal their locations.
According to three people familiar with the matter, Microsoft had privately linked Iran to the October attacks at least two weeks earlier. Microsoft declined to comment.
On 11 October, hackers took control of the software that regulates temperatures in refrigeration units used by many French supermarkets. The software, provided by the Danish engineering firm Danfoss, allows retailers to manage their cold units remotely.
Temperature controls were overridden overnight. In some stores, fridges reportedly reached 50C (120F). Some units were heated so much that they caught fire.
The French report said 700 commercial sites were targeted and at least 15 fires broke out. Most of the sites were supermarkets, but small butchers’ shops, a slaughterhouse and food-processing factories were also hit.
More than 100 Coopérative U supermarkets were affected, along with 180 Intermarché and Netto stores. Carrefour, Monoprix and E.Leclerc were also hit.
In the hours after the attack, staff carried boxes of spoiled meat and melted ice cream to large rubbish containers. Fresh and frozen food worth millions of euros was ruined. One French supermarket owner estimated that the total cost nationwide could reach tens of millions of euros.
Cybersecurity experts had previously told Reuters that the attack appeared easy to carry out. The company behind many of the affected units said that several were obsolete or running outdated firmware, which could have made them easier to break into.
Earlier this month, a second wave of attacks hit more than 100 establishments in seven other European countries. Supermarkets in Belgium and Luxembourg were affected, as were a smaller number of shops in Sweden, Ireland, the Netherlands, Estonia and Finland.
Refrigerators used by French blood banks were also affected, forcing staff to move some blood supplies to other cold storage.
It is not known whether the two waves are linked.
On Wednesday, two Russian-aligned hacktivist groups claimed responsibility for the attacks, but few believed them.
The simplicity of the hacks, and the fact that they were repeated in several countries, had fuelled speculation about the culprits.
Concerns include Russia’s suspected sabotage campaign in Europe, the war between the U.S. and Iran, and the global rise of AI-powered cyberattacks. Iran was on experts’ list of possible suspects.
The European attacks were preceded by at least one similar incident in the U.S.
In August, refrigerators at no fewer than six U.S. military commissaries stopped working. Pentagon investigators are treating the failures as a suspected cyberattack and are working with French officials, Reuters reported last month.
A person familiar with the matter said the Pentagon considers Iran a suspect but that the investigation is continuing. The news website Nextgov first reported that the military regarded Iran as a suspect.
The Pentagon said on Monday that it was “aware of speculation regarding a potential cyber incident”. It said military investigators were working on the case but that it could not comment further for security reasons.
Reuters could not independently establish whether the U.S. incidents, the attacks in France and the later wave across Europe were connected.
The gunman who allegedly killed six people in Poland’s unprecedented mass shooting in central Kraków on Saturday has died in hospital, police said early Monday. The attacker had demonstrated advanced military-style marksmanship skills, according to a spokesperson for the shooting club he attended.
Poland has declared two days of national mourning after a gunman opened fire in Kraków's historic main square. Investigators are examining possible far-right influences and the discovery of three bodies at the suspect's home.
Monday marks the second of two days of national mourning in Poland as police bolstered security after six people were killed in a mass shooting in Kraków.
The Saudi-led coalition fighting Yemen's Houthis said it intercepted and destroyed two ballistic missiles fired by the Iran-aligned group towards Riyadh on Sunday (8 November), after loud booms were heard in the Saudi capital. The Aramco building was damaged by falling debris.
Azerbaijan is marking the sixth anniversary of Victory Day on Sunday, 8 November, with President Ilham Aliyev visiting the Victory Monument in Khankendi, laying a wreath and paying tribute to servicemen killed during the 44-day Second Garabagh War in 2020.
China has extended the suspension of its additional 24 per cent tariff on U.S. goods for another two months, while keeping a 10 per cent levy in place, as Beijing and Washington seek to maintain their fragile trade truce.
Russia and Ukraine are set to return to Abu Dhabi on Tuesday for a fourth round of U.S.-brokered peace talks, with European participation, security guarantees and territorial disputes expected to shape the negotiations.
The bodies of 13 migrants have been recovered from a boat off the Greek island of Crete, the Greek coast guard said on Monday. A further 18 people were rescued, with four taken to hospital.
Israeli President Isaac Herzog has tasked Gadi Eisenkot, Prime Minister Benjamin Netanyahu’s main rival, with trying to form a government after an inconclusive election. The decision, announced on Saturday, follows a vote that left neither candidate with a clear path to power.
U.S. President Donald Trump is set to host Qatar’s prime minister at the White House on Monday as efforts to end the conflict with Iran stall, with Washington and Tehran still far apart on the terms of a possible agreement.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment