French supermarket cyber-attacks linked to Islamic Revolutionary Guard Corps

France has officially attributed a series of cyber-attacks on supermarket refrigeration systems to hackers operating under the Islamic Revolutionary Guard Corps, a key branch of Iran’s military establishment. Although no specific message was left during the incident, the disruption gained significant global attention.

Some of the affected refrigerators had their internal temperatures increased to such an extent that they ignited, leading to fires. In the aftermath of the hack, supermarket staff were forced to discard large quantities of spoiled meat and melted ice cream into bins.

The French foreign minister labelled the incident an act of “unprecedented scale and unprecedented aggression” and committed to enforcing “Europe-wide sanctions” against the parties responsible. This event follows similar disruptions, including attacks on industrial freezers at an Israeli food production plant in May and malfunctions at US military bases in August that are reportedly being treated as suspected hacks. While those previous incidents were not formally linked to Iran, this marks the first time a state has been implicated in this specific type of cyber-attack.

Rafe Pilling, a senior director at the cybersecurity firm Sophos, noted that the attack was relatively unsophisticated, as the hackers simply utilised default passwords to gain access to the fridge controls. “The attacks themselves were not particularly complex,” he said. Pilling added that there is now a presumption that the French incidents are linked to a wave of rogue defrosting hacks reported across Europe last week.

According to Pilling, hostile cyber operations against Western nations typically originate from a quartet of countries consisting of China, Russia, Iran and North Korea. Each nation demonstrates distinct characteristics, with China focusing on industrial espionage, Russia on infrastructure disruption and disinformation, and North Korea on targeting crypto exchanges for financial gain. Iran, however, aims to signal its political displeasure to adversaries. “In general Iran uses cyber-attacks to project power internationally and to signal their political displeasure with regional and international adversaries,” Pilling stated.

These freezer hacks occurred as the UK’s national cybersecurity centre issued a warning that the country is currently in the “foothills” of a new level of cyber threat, anticipating a “huge rise” in the volume of future incidents. The primary concern relates to AI, which can identify previously unforeseen flaws in IT systems. While the underlying context of the fridge attacks is rooted in geopolitics rather than AI, the combination of emerging technology and tense global relations creates an alarming landscape.