France blames Iran's IRGC for sabotage at about 700 retail sites
Original title: France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites
Attackers raised defrost settings on Danfoss and Dixell controllers on October 11, causing food losses and fires.
France said Shahid Kaveh, a cyber unit of Iran's Islamic Revolutionary Guard Corps, remotely changed refrigeration controllers at about 700 French retail sites on the night of October 11. Abnormal defrost cycles and disabled temperature alerts caused food losses estimated at several tens of millions of euros and fires. Large retailers including Casino, Leclerc, Carrefour and Intermarché were among those hit. Prosecutors opened an investigation and sought international arrest warrants. CERT-FR says related campaigns may still be underway.
Unconfirmed: The article gives both at least 15 and about 20 fires, and France did not address last week's attacks elsewhere in Europe.
- The article cites at least 15 fires and, elsewhere, about 20 fires.
- Schneider Electric equipment at small hydro plants saw moderate effects.
- France links the unit to personas CyberAveng3rs and Cyber Isnaad Front.
- CERT-FR named Danfoss AK-SM and AK-SC, Copeland xweb and Dixell xweb.
- Exposed end-of-life controllers remain highly vulnerable after a factory reset.
Impact: Remote changes to refrigeration settings caused food loss and fires
| Product | Affected |
|---|---|
| Danfoss AK-SM | — |
| Danfoss AK-SC | — |
| Copeland xweb | — |
| Dixell xweb | — |
| Schneider Electric equipment | — |
- 1.Remove internet exposure from the named refrigeration controllers and public-IP units.
- 2.Restore access only through a VPN or protected network and review defrost ranges.
- 3.For Danfoss, update firmware, set security to Strict and change default passwords.
- Threat actors
- Shahid KavehCyberAveng3rsCyber Isnaad Front
- Organizations
- Islamic Revolutionary Guard CorpsANSSICERT-FR
From the original article
4 min read at thehackernews.com
An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday. The attackers broke into controllers on the night of October 11 and changed their defrost settings to high temperatures. That caused food losses and, in at least 15 cases, fires.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.