France has accused Shahid Kaveh, an alleged cyber unit affiliated with Iran's Islamic Revolutionary Guard Corps (IRGC), of orchestrating a series of cyberattacks targeting commercial sites across France. The most recent attack, which took place on October 11-12, involved hacking into refrigeration systems in hundreds of supermarkets, raising temperatures and spoiling millions of euros' worth of food. The Paris prosecutor's office has specifically blamed Shahid Kaveh, describing it as an "offensive cyber unit" under the IRGC's cyberelectronic command (CEC). Three alleged perpetrators have been named in a report published by France's spy and cyber agencies: Hamid Reza Lashgarian, head of the CEC, and Mahdi Lashgarian and Reza Salarvand, commanders in the Shahid Kaveh unit. Iran has denied any involvement, calling the accusations baseless and biased. Western intelligence agencies have linked Shahid Kaveh to the IRGC, assessing it as part of a network of hackers operating under Tehran's direction. The group is reportedly known for operating through front groups posing as vigilante hackers, including "CyberAveng3rs" and "Cyber Isnaad Front."
Furthermore, Iran has extensive cyber capabilities that it is increasingly using to advance its wartime objectives. According to experts, there has been a notable uptick in Iran's cyber operations since March 2026, including cyberespionage and conflict-themed cybercrime. The UK Parliament's Intelligence and Security Committee describes Iran as an aggressive cyber actor with extensive capabilities, although its cyber capacity is not as sophisticated as Russia's or China's. Cyberoperations are a deniable tool that Iran can use to attack its enemies, respond to perceived aggression, and project power in the region and globally. The IRGC and affiliated groups have been linked to past cyberattacks on targets in the United States and Israel, including water infrastructure.
Iran has never publicly acknowledged the existence or purpose of Shahid Kaveh. However, its alleged involvement in recent cyberattacks highlights the growing threat of state-sponsored hacking groups and the need for international cooperation to combat such threats. As global economies become increasingly dependent on digital infrastructure, efforts to protect critical systems from cyberattacks will be crucial in maintaining stability and preventing financial losses.