ZeroFox Intelligence Flash Report - French Supermarket Cyberattack amid Civil Unrest Consistent with Pro-Russia Cyber Tactics

ZeroFox Intelligence Flash Report - French Supermarket Cyberattack amid Civil Unrest Consistent with Pro-Russia Cyber Tactics

Product Serial: F-2026-10-15a

TLP:CLEAR

In this Flash Report, ZeroFox researchers discuss the October 11-12 cyberattacks on French supermarket refrigeration systems

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• ZeroFox assesses the October 11–12 cyberattack on French supermarket refrigeration systems is consistent with pro-Russia cyber techniques used against European states supporting Ukraine; no actor has claimed responsibility, and attribution remains unconfirmed.
• The attack is suspected to have exploited previously disclosed vulnerabilities in end-of-life or outdated Danfoss AK-SM 800A refrigeration controllers, including flaws that could allow authentication bypass and remote code execution (RCE).
• The attack occurred amid civil unrest that Russia-linked influence operations are almost certainly already exploiting.
• Organizations operating internet-exposed, end-of-life, or outdated Danfoss refrigeration controllers face elevated risk of similar attacks.