Skip to main content
CampaignPublished

European Refrigeration Systems Cyber Sabotage

Source AlienVault OTX General

0

Description

A coordinated cyber campaign beginning in October 2026 targeted commercial refrigeration systems across multiple European countries. Attackers exploited default configurations, weak passwords, and internet-exposed management interfaces to manipulate refrigeration settings, causing product spoilage and business disruptions. The campaign affected supermarkets, meat-processing facilities, and medical cold-storage systems. Attribution includes Iran's IRGC unit Shahid Kaveh for initial attacks in France and Russian-aligned groups NoName057(16) and Z-Pentest for the broader campaign. The attacks leveraged operational technology vulnerabilities rather than sophisticated malware.

Indicators of compromise

IP addresses 1

  • 188.208.141.210

CVEs 6

  • CVE-2025-41450
  • CVE-2025-41451
  • CVE-2025-41452
  • CVE-2023-25913
  • CVE-2023-25914
  • CVE-2023-25915

Community reviews

Loading reviews…