France has officially attributed last month's cyberattack on supermarket refrigeration systems to Iran. According to the French cyber crisis coordination center, which includes national cyber agency ANSSI, military cyber command and the intelligence services, the Shahid Kaveh unit of Iran's Revolutionary Guards was behind the attack. Paris prosecutors cited Farsi-language activity and IP addresses traced to Iran as evidence.
The attack took place on the night of October 11 to 12. According to reports, the attackers broke into the industrial controllers of refrigeration systems in about 700 stores and remotely changed defrost settings to high temperatures. The result was at least 15 fires. Similar attacks were reported in Belgium, Estonia, Finland, Luxembourg and Sweden.
The French response is sharp. Foreign Minister Jean-Noël Barrot said the Iranian ambassador was summoned and called the attack unprecedented in its scale and aggression. France will seek European-level sanctions against those responsible, and the Paris prosecutor's office has opened a judicial investigation and is seeking international arrest warrants for the unit's commander and two deputies. Iran routinely denies involvement in cyber operations, and according to Reuters it could not independently verify how the authorities reached their conclusion.
The attack's significance goes beyond the local damage. Until now, cyberattacks on industrial control systems were seen mainly as a threat to infrastructure such as power and water. Here supermarket fridges, entirely civilian equipment, were attacked, and the result was physical fires. It marks a new stage: any networked device that controls something physical is a possible target.
For Israel, which has faced Iranian cyberattacks on water infrastructure, hospitals and companies for years, there is no surprise here. But a major European country publicly attributing such an attack to the Revolutionary Guards and demanding sanctions is a change. Europe, which for years saw Iranian cyber warfare as a Middle Eastern problem, may be starting to understand it is within range.
