Group linked to supermarket attack is managed by a division of the Iranian armed forces

The French government has accused the Shahid Kaveh group of orchestrating unprecedented cyberattacks on the refrigeration systems of 700 supermarkets. Investigations reveal that these hackers, linked to Iran, disguise themselves as security personnel before launching attacks. Named after a former commander of the Islamic Revolutionary Guard Corps (IRGC), the group is part of a broader network operating under Tehran's guidance. U.S. sanctions have been imposed on Hamid Reza Lashgarian and Mahdi Lashgarian for their alleged ties to the IRGC's cyber unit. Despite Iran's denial of involvement, experts note a significant increase in its cyber espionage operations since March 2026, with warnings about potential advancements in their cyber capabilities. A UK intelligence report describes Iran as an aggressive cyber actor with extensive capabilities, albeit using more basic techniques than other powers.