France Accuses Iranian Hackers of Targeting Supermarket Refrigeration Systems

The French government has formally accused Iranian state-sponsored cyber actors of orchestrating a sophisticated attack on supermarket refrigeration systems across Europe. The cyber assault, which caused significant operational disruption and financial losses, involved remotely manipulating the temperature settings of commercial cooling units, effectively turning them into heating devices. This incident has prompted international outrage, with G7 foreign ministers currently considering a coordinated package of economic sanctions against Tehran in response to the breach.

Cybersecurity experts and investigators have reconstructed the attack, revealing that the hackers exploited known vulnerabilities in Danfoss refrigeration controllers. These devices, which are essential for maintaining food safety and inventory integrity, were found to be inadequately secured and directly exposed to the public internet. Despite warnings from security organizations like Shadowserver, which identified approximately 170 vulnerable controllers globally, many retailers failed to patch these systems in time, leaving them susceptible to remote exploitation.

The consequences of the attack were severe, extending beyond mere financial damage to the spoilage of massive quantities of perishable goods. In some instances, the temperature spikes were so extreme that they compromised the integrity of sensitive items, including medical supplies like blood banks that rely on the same cooling infrastructure. This incident has raised broader concerns regarding the security of the Internet of Things (IoT) and the vulnerability of critical infrastructure to state-sponsored cyber warfare.

As the investigation continues, French authorities are working closely with international partners to trace the digital footprint of the attackers. The incident serves as a stark reminder of the evolving nature of global cyber threats, where everyday commercial hardware can be weaponized to cause widespread economic and social disruption. Governments are now under increased pressure to mandate stricter cybersecurity standards for industrial and commercial equipment to prevent similar incidents in the future.

Sources: Central News Agency (CNA)