Search — “Shahid Kaveh”

France's foreign ministry and C4 coordination center attributed October 11–12 attacks that remotely altered defrost settings on Danfoss refrigeration controllers at retail sites to the IRGC-affiliated Shahid Kaveh unit, with at least 15 fires reported. The sources describe the attribution, linked hacktivist personas (CyberAveng3rs, Soldiers of Solomon, Mr. Soul, Cyber Isnaad Front), and reconnaissance of Schneider Electric industrial systems using FOFA. The sources provide no technical detection content or indicators for the intrusion path, so hunters should focus on exposed industrial controller management interfaces and FOFA-style internet-exposed device reconnaissance.