France Accuses Iran's Revolutionary Guards of Cyberattacks That Disrupted Hundreds of Food Cold-Storage Sites

At least 15 fires were triggered at affected sites, and blood supplies had to be moved to alternative cold-storage units after refrigerators used by French blood banks were disrupted.
Hackers raised the temperature of refrigeration units, and fires followed
French authorities say the sabotage of about 700 sites caused at least 15 fires.
Mark

Why does attacking refrigerators matter so much? It sounds almost mundane.

Mimi

Because the damage is physical. Hackers raised temperatures in the units, and at least 15 fires broke out. It also reached food supply and, later, blood banks.

Mark

What happened with the blood banks?

Luke

The report says the November wave disrupted refrigerators used by French blood banks, and staff moved some supplies to other cold storage. We don't have figures on how much blood, or whether any was lost.

Mark

How does France connect this to Iran's Revolutionary Guards?

Mimi

Through a unit called Shahid Kaveh. Investigators examined the attack infrastructure, compared intrusion patterns with other operations attributed to the unit, and found traces of Persian language.

Luke

Worth noting those are investigators' findings as reported by Reuters. We haven't seen the underlying evidence, and Persian-language traces alone are not conclusive. Iran's response isn't in this reporting.

Mark

The hackers used names like CyberAveng3rs. Why?

Mimi

The report says they were fronts posing as vigilante hacktivists, which gives the real operators some distance.

Mark

Did anyone else see this coming?

Luke

Three unnamed people say Microsoft privately linked Iran to the October attacks at least two weeks earlier. Microsoft declined comment, so that's anonymous sourcing.

Mimi

What's concrete is the diplomatic step: the ambassador was summoned and arrest warrants have been sought.

  • Roughly 700 French commercial refrigeration sites were sabotaged, and the cooling systems meant to keep food safe were pushed into overheating.
  • At least fifteen fires broke out as hackers raised temperatures, turning routine equipment into a genuine physical hazard.
  • Blood-bank refrigerators were disrupted, forcing staff to rush blood supplies into alternative cold-storage units under pressure.
  • Attacks were routed through front groups posing as vigilante hacktivists, deliberately blurring who was really behind them.
  • Paris has sought international arrest warrants, summoned Iran's ambassador, and raised the prospect of new EU sanctions.
  • The response is still unfolding, with Tehran's reply and whether other governments will publicly share the attribution yet to be seen.

On a Monday in November, French authorities pointed to a hidden hand behind a campaign that turned the cooling systems of hundreds of ordinary businesses, from supermarkets to village butcher shops, against the very goods they were meant to protect. The state's finding names Iran's Revolutionary Guards and a unit called Shahid Kaveh, placing a quiet war waged through machinery into the longer, harder story of the conflict with Iran that began in February. It is a reminder that in the modern world, the cold in a shop's freezer can become a front line, and that the people who pay for such fighting are often those who never chose to take part in it.

On Monday, French authorities named a culprit for a wave of sabotage that had turned the cooling systems of hundreds of French businesses against themselves. A joint report from French intelligence and cybersecurity agencies blamed Iran's Revolutionary Guards, specifically a cyber offensive unit called Shahid Kaveh. Foreign minister Jean-Noël Barrot summoned the Iranian ambassador and warned that the European Union could impose further sanctions.

The scale was large. About 700 commercial sites were targeted, most of them supermarkets, along with small butcher shops, a slaughterhouse and food factories. Beginning in early October, hackers raised the temperature of refrigeration units, and at least fifteen fires broke out. The operators worked through front groups posing as vigilante hackers, and investigators tied the campaign to Shahid Kaveh through the infrastructure used, matching intrusion patterns, and traces of Persian language.

Paris prosecutors have sought international arrest warrants for three alleged associates. A further wave this month hit more than 100 establishments across Europe and again disrupted blood-bank refrigerators, forcing staff to move supplies to other cold storage. Microsoft had reportedly linked Iran to the earlier sabotage privately weeks before, though the company declined to comment.

The episode sits within a wider pattern of disruptive cyber incidents tied to the conflict with Iran, which began in February. What comes next depends on whether the warrants lead anywhere, whether new sanctions follow, how Tehran responds, and whether other governments make the same attribution.

On Monday, French authorities named a culprit for a wave of sabotage that had turned the cooling systems of hundreds of French businesses against themselves. A joint report from French intelligence and cybersecurity agencies blamed Iran's Revolutionary Guards, and specifically a cyber offensive unit called Shahid Kaveh, which the report describes as linked to the Guards.

Foreign minister Jean-Noël Barrot said the Iranian ambassador had been summoned to the foreign ministry. He also warned that the European Union could impose further sanctions on Iran over the attacks. Reuters, which reported the details, said the report warned Tehran of consequences.

The scale, according to the report, was large. About 700 commercial establishments across France were targeted, most of them supermarkets. Small butcher shops, a slaughterhouse and food-processing factories were also hit. The attacks began in early October and disrupted cold-storage systems. In at least 15 cases fires broke out, as the hackers raised the temperature of refrigeration units.

The report says the operators did not present themselves as a state unit. They worked through front organisations posing as vigilante hacking groups, among them one calling itself "CyberAveng3rs" and another called "Cyber Isnaad Front." French investigators said they tied Shahid Kaveh to the campaign in three ways: by examining the digital infrastructure used to sabotage the refrigeration systems, by comparing the intrusion patterns with other operations attributed to the unit, and by finding traces of Persian language in the attack infrastructure.

The report names three alleged associates of the unit: Hamid Reza Lashgarian, Mahdi Lashgarian and Reza Salarvand. Paris prosecutors said separately that they had sought international arrest warrants for those allegedly responsible.

The October attacks were not the last. A further wave of hacking this month affected more than 100 establishments across Europe. Those incidents also disrupted refrigerators used by French blood banks, and staff had to move some blood supplies into alternative cold-storage units.

The campaign sits within a wider pattern. The attacks have been among the most disruptive cyber incidents linked to the conflict with Iran, which began in February. Other alleged digital disruptions during that conflict include attacks on the Los Angeles transit system in March, on US water treatment plants in July, and on ships bound for the United States in August. Government agencies and technology companies on both sides of the Atlantic have been investigating these incidents.

The French attribution was not the first to surface. According to three people familiar with the matter, Microsoft had privately linked Iran to the October cold-storage sabotage at least two weeks earlier. The company declined to comment.

What to watch now: whether the arrest warrants lead anywhere, whether the EU moves ahead with new sanctions, how Tehran responds, and whether other governments publicly make the same attribution.

The Iranian ambassador had been summoned, and the EU could impose further sanctions on Iran over the attacks.
— Jean-Noël Barrot, French foreign minister (paraphrased)
Möchten Sie die ganze Geschichte? Das Original lesen bei The Times of India ↗
Kontakt FAQ