French Foreign Ministry Summons Iranian Ambassador Over Supermarket Cyberattacks
France summoned Iran's ambassador on November 10 after blaming an Iranian Revolutionary Guards unit for attacks on supermarket refrigeration. Paris is seeking European sanctions over the October operation, which investigators linked to food losses and fires.
The Foreign Ministry confirmed Tuesday's summons in a statement carried by Reuters. Iran's Foreign Ministry rejected the accusation.
The French Foreign Ministry named the Shahid Kaveh unit in a statement on Monday, November 9, following an investigation into attacks during the night of October 11 to 12. The ministry said refrigeration controllers installed at more than 700 retail sites had been targeted, with food losses estimated at tens of millions of euros.
Refrigeration Settings Become a Weapon
A technical assessment published by France's cyber crisis coordination center, known as C4, describes how the attackers changed defrost settings to high temperatures. The center recorded fires in at least 15 cases. Its account also identifies victims beyond supermarkets, including small butcher shops, a slaughterhouse and food processing cooperatives.
C4 additionally linked attacks on equipment at small French hydroelectric installations to the same operation. It described the effects there as moderate.
Prosecutors Open a Judicial Investigation
The Paris prosecutor's office announced a judicial investigation into computer system offenses and dangerous damage carried out by an organized group for the benefit of a foreign power, identified as Iran. It also cited suspected participation in a criminal conspiracy preparing a serious offense.
The prosecutor said investigators had identified an attack method characteristic of the unit, traces of Persian language use and IP addresses linked to terminals in Iran. The investigation is being conducted by France's cybercrime office, OFAC, and domestic intelligence service, DGSI, under investigating judges.
An Iranian Unit With Israeli Targets
C4 places Shahid Kaveh within the Revolutionary Guards' electronic and cyber apparatus. It associates the unit with online identities including CyberAveng3rs, which publicize attacks while presenting themselves as activist hackers. The assessment describes industrial sabotage campaigns directed principally against Israel and the United States, as well as European countries.
That history connects the French case to the cyber threats facing Israel and the wider reach of Iranian operations overseas. The common exposure is connected equipment used across national borders, including products made by Israeli companies.
In a December 2023 advisory, the United States Cybersecurity and Infrastructure Security Agency and partner agencies identified Revolutionary Guards affiliated actors targeting Israeli made Unitronics controllers. American water facilities were among the affected organizations. The agencies warned that such controllers were also used in other industries, including energy and food production.
Paris Seeks a European Response
The Foreign Ministry said France would propose additional European sanctions against Iranian individuals and entities involved in malicious cyber activity. It also reserved the option of further responses, both public and nonpublic.
The new proposal follows European measures adopted in March against Emennet Pasargad over earlier Iranian cyber operations. France's November statement pointed to attacks involving Charlie Hebdo and the 2024 Paris Olympics as part of that history.
The joint C4 assessment brings together France's cybersecurity agency ANSSI, foreign intelligence service DGSE, domestic intelligence service DGSI, defense procurement agency DGA and military cyber command COMCYBER.
