France attributes October supermarket freezer hacks to Iran's IRGC
Original title: Srsly Risky Biz: Iranian Hacks With Russian Characteristics
US sources agree only with low confidence, while the newsletter argues the destructive pattern looks more Russian.
French authorities attribute October 11-12 refrigeration attacks on about 700 French retail sites to IRGC cyber units. Freezers on Danfoss controllers were set to high temperatures, spoiling food and starting fires at 15 locations. Unnamed US intelligence sources told The New York Times they reached the same conclusion with low confidence. The newsletter also covers CrowdStrike's report that Vapor Panda used the ARTEX agentic pentesting framework against more than 200 organisations in 11 days from mid-October.
Unconfirmed: US attribution is low confidence and could change; the newsletter suspects possible Russian involvement.
- Related freezer incidents ran from August US commissaries through early November European stores and French blood-service fridges.
- Only the October French retailer wave is attributed; three other attack waves are not.
- France plans to summon Iran's ambassador and discuss new European sanctions.
- CrowdStrike says Vapor Panda ran parallel attacks via web apps, cloud, containers, mail and VPN.
- GTIG describes ARTEX as an autonomous multi-agent LLM pentesting and offensive C2 platform.
Impact: Freezer temperatures raised, spoiling food and causing fires
- Vendors
- Danfoss
- Threat actors
- IRGCTurlaSilkParasiteVapor Panda
- Organizations
- CrowdStrikeGoogle Threat Intelligence GroupNCSC
- Countries
- FranceIranUnited StatesRussiaChina
From the original article
9 min read at news.risky.biz
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Airlock Digital. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your
By Tom Uren · news.risky.biz
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.