France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites

A cyberattack attributed to Iran's Islamic Revolutionary Guard Corps (IRGC) unit Shahid Kaveh targeted over 700 retail sites in France by exploiting internet-exposed web interfaces of Danfoss and Dixell refrigeration controllers. Attackers manipulated defrost settings to cause elevated temperatures, resulting in substantial food spoilage and at least 15 structural fires. Reconnaissance for the campaign relied on public internet search tools like FOFA to identify vulnerable industrial control equipment exposed to the perimeter.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's port module scans public IP ranges to identify open HTTP/HTTPS services and exposed administration panels associated with industrial devices, such as Danfoss and Dixell refrigeration controllers accessible via public web interfaces.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.

Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

Launch Scan For My Domain