Iranian hackers turned up the heat on French supermarket freezers, says France
France has officially accused Iran of cyber attacks that targeted supermarket refrigeration systems last month, causing fires and millions of euros in damage.
According to French authorities, a hacking unit from Iran's Islamic Revolutionary Guard Corps (IRGC) sabotaged food refrigeration systems at approximately 700 retail sites, sparking at least 15 fires and causing tens of millions of euros worth of damage. On the night of October 11, the hackers seized remote control of refrigeration controllers and changed their defrost settings to high temperatures.
Targeted Supermarkets
Victims of the attack included major French supermarket chains such as Casino, Leclerc, Coopérative U, Metro, Carrefour and Intermarché, as well as butchers, a slaughterhouse, and food-processing plants. The targeted refrigeration controllers were made by Danish firm Danfoss, with the attackers focusing on older versions of its software.
Evidence Points to Iran
French authorities blame Shahid Kaveh, a hacking unit within the IRGC, for the attacks. Evidence includes the use of the same infrastructure to scan Schneider Electric equipment at energy and water facilities, traces of Farsi, and the attack being promoted by a propaganda outlet linked to the unit within a day.
The finger of blame has been pointed by French authorities in the direction of Shahid Kaveh, a hacking unit within the IRGC.
Broader Cyber Campaign
Shahid Kaveh operates under various hacktivist guises including CyberAv3ngers, Soldiers of Solomon, and Cyber Isnaad Front. The same hackers are also believed to have targeted small hydroelectric facilities, while another Iranian unit called Shahid Shoostari is held responsible for attacks on Charlie Hebdo and an attempt to hijack display screens during the 2024 Paris Olympics.
In early November, a second wave of attacks on refrigeration units hit businesses across Europe, including three French blood service sites, though these have not yet been officially attributed to Iran.
Security Recommendations
Experts emphasize the importance of securing refrigeration systems against tampering. Organizations should ensure operational technology interfaces aren't exposed to the internet, keep controller software updated, change default passwords, and segment and monitor OT networks for unexpected changes.
With fridge attacks continuing to create disruption and cost millions of euros, relations between Paris and Tehran are likely to remain strained as investigations continue.
Related
