A coordinated cyber campaign beginning in October 2026 targeted commercial refrigeration systems across multiple European countries. Attackers exploited default configurations, weak passwords, and internet-exposed management interfaces to manipulate refrigeration settings, causing product spoilage and business disruptions. The campaign affected supermarkets, meat-processing facilities, and medical cold-storage systems. Attribution includes Iran's IRGC unit Shahid Kaveh for initial attacks in France and Russian-aligned groups NoName057(16) and Z-Pentest for the broader campaign. The attacks leveraged operational technology vulnerabilities rather than sophisticated malware.
