Iranian Cyber Unit Shahid Kaveh Accused of Fridge Hacking in France

In a recent cyberattack that targeted refrigerators in French supermarkets, the French government has accused an Iranian group known as Shahid Kaveh of being the culprit. This IRGC-linked unit, which operates through front groups posing as vigilante hackers, is said to have hacked into refrigeration systems in hundreds of stores across France on October 11-12, causing millions of euros worth of food to spoil. French officials allege that the Islamic Revolutionary Guard Corps (IRGC) orchestrated this attack, with Shahid Kaveh being a part of their offensive cyberunit affiliated with the IRGC's cyberelectronic command (CEC). The Paris prosecutor’s office has specifically named three alleged perpetrators – Hamid Reza Lashgarian, Mahdi Lashgarian, and Reza Salarvand, who are reportedly commanders in the Shahid Kaveh unit.

Iran, however, has denied any involvement in the cyberattacks, calling the accusations "baseless and biased". The Iranian Foreign Ministry issued a statement warning that Tehran would take measures to safeguard its national interests and security, but made no mention of the Shahid Kaveh unit. Western intelligence agencies have linked Shahid Kaveh to the IRGC, assessing it as part of a network of hackers operating under Tehran’s direction. The group is known to operate through numerous front groups, such as "CyberAveng3rs" and "Cyber Isnaad Front", which publicly claim responsibility for certain attacks carried out by the Shahid Kaveh unit.

Experts suggest that Iran has extensive cybercapabilities that it is increasingly using to advance its wartime objectives. There has been a notable uptick in Iran’s cyberoperations since March 2026, including cyberespionage and conflict-themed cybercrime. The UK Parliament’s Intelligence and Security Committee describes Iran as “an aggressive cyberactor with extensive capabilities”, although its cybercapacity is not as sophisticated as Russia’s or China’s. Cyberoperations are also a deniable tool that Iran can use to attack its enemies, respond to perceived aggression, and project power regionally and globally. The IRGC and affiliated groups have been linked to past cyberattacks on targets in the United States and Israel, including water infrastructure.

In conclusion, the recent fridge hacking incident in French supermarkets has brought renewed attention to Iranian cyber unit Shahid Kaveh, which is allegedly tied to the IRGC. The group operates through front groups posing as vigilante hackers and has been linked to a series of cyberattacks against various targets worldwide. France's accusations against Shahid Kaveh are significant, highlighting Iran's increasing use of cyberwarfare tactics in its foreign policy.