France attributes supermarket cyberattacks to Iranian Revolutionary guard

Foreign Minister Jean-Noel Barrot confirmed the IRGC’s involvement, describing the attacks as “unprecedented in both its scale and its level of aggression” during a G7 foreign ministers’ meeting in Paris. A judicial investigation has been launched against Shahid Kaveh, a cyber unit of the IRGC, also known as CyberAveng3rs.

Paris prosecutor Laure Beccuau stated that the investigation focuses on the head and two deputies of Shahid Kaveh, an offensive cyber unit linked to the IRGC’s Electronic and Cyber Centre. The French Centre for Coordination of Cyber Crises identified Hamid Reza Lashgarian, Reza Salarvand, and Mahdi Lashgarian as key figures involved in the operation, noting the unit has previously targeted Israel and the United States in addition to France and other European countries.

Similar incidents were reported in at least nine other European countries on November 2nd. The attacks come amid heightened concerns about cyber threats, particularly from Russia, as European nations continue to support Ukraine in its conflict with Moscow. Recent disruptions to European air traffic due to false bomb alerts further contribute to the climate of heightened security.

US Secretary of State Marco Rubio, also present at the Paris talks, characterized the IRGC as a “deranged group of revolutionaries,” echoing previous accusations against Iran. The US Treasury announced sanctions in 2024 against Hamid Reza Lashgarian and Mahdi Lashgarian, among others, for their involvement in cyberattacks. Lashgarian is also described as a commander in the IRGC’s Quds force.

According to the Paris prosecutor, the attackers remotely controlled equipment by initiating defrost cycles and disabling temperature sensors. France has summoned the Iranian ambassador to formally protest the attacks and has pledged to implement sanctions at the European level. EU foreign policy chief Kaja Kallas emphasized the need for a “strong” response.