一名女子于10月12日走过法国西部内韦兹一家Intermarché超市内空空如也的冷藏柜，此前一起网络攻击波及法国超市连锁Intermarché和Cooperative U，导致其冷藏设备化霜。
A woman walks past empty refrigerators at an Intermarché supermarket in Névez, western France, on Oct. 12, following a cyberattack affecting the French supermarket chains Intermarché and Cooperative U that caused their refrigerators to defrost.
FRED TANNEAU/AFP via Getty Images 法国指责伊朗在10月发动了一系列针对其关键基础设施的破坏性网络攻击。
FRED TANNEAU/AFP via Getty Images France is accusing Iran of having launched a series of destructive cyberattacks against its critical infrastructure in October.
据法国国家网络安全局（ANSSI）称，伊朗军方黑客接管了法国约700个零售场所的制冷控制器，涵盖超市到肉铺，在半夜调高温度，导致价值数百万美元的食品变质。
According to the French National Cybersecurity Agency, ANSSI, Iranian military hackers took over refrigeration controllers at around 700 different retail sites in France, from supermarkets to butcher shops, turning up the temperature in the middle of the night and spoiling millions of dollars' worth of food.
ANSSI在其新闻稿中写道，他们还以几座小型水电站为目标，造成了“中等程度影响”。
They also targeted several small hydroelectric power plants, resulting in "moderate effects," wrote ANSSI in its press release.
法国外交部长让-诺埃尔·巴罗表示，这场黑客行动“在规模和侵略性程度上均属前所未有”。他说，这“标志着首次大规模以破坏为目的的网络攻击针对我国领土，构成对国家利益和法国人民安全的重大攻击”。巴黎检察官办公室已自行对伊朗网络部队“沙希德·卡维赫”展开调查，法国政府将其与伊朗伊斯兰革命卫队联系在一起。“巴黎公共检察官办公室正在请求签发国际逮捕令，”该办公室在一份声明中说。
The hacking campaign was "unprecedented in both its scale and its level of aggression," said French Foreign Minister Jean-Noël Barrot. He said it "marks the first large-scale cyberattack aimed at sabotage on our national territory, and it constitutes a major attack on the nation's interests and the security of the French people." The Paris Prosecutor's Office has opened its own investigation into the Iranian cyber unit, Shahid Kaveh, which the French government is linking to Iran's Islamic Revolutionary Guard Corps. "The Paris Public Prosecutor's Office is requesting the issuance of international arrest warrants," the office said in a statement.
针对制冷系统的攻击趋势 对法国工业控制器的攻击是更大趋势的一部分。仅在2026年，黑客就从欧洲到以色列和美国，以制冷控制器为目标。包括瑞典和爱尔兰在内的欧洲国家的杂货店上周遭遇了类似攻击。
A trend of attacks on refrigeration systems The attacks on French industrial controllers are part of a larger trend In 2026 alone, hackers have targeted refrigeration controllers from Europe to Israel and the United States. Grocery stores in European countries including Sweden and Ireland were hit in similar attacks last week.
在法国发生的一起单独事件中，一家主要法国血库的员工上周不得不迅速采取行动，防止血液样本因制冷系统遭袭而升温变质，这引发了国际社会呼吁卫生部门保护其救命产品免遭损坏。
In a separate incident in France, employees at a major French blood bank had to act fast to save blood samples from heating up when their refrigeration system was hit last week, prompting international calls for the health sector to protect its lifesaving products from spoiling.
今年春天在以色列，自称“Cyber Isnaad Front”（赛伯·伊斯纳德阵线）的疑似伊朗黑客宣称对一家工业食品加工厂实施了破坏，包括用恶意软件感染其企业电脑、接管办公打印机打印威胁信息，以及入侵办公摄像头，将其用于10月初发布的一段宣传视频。该视频包含一句法语嘲讽，涉及当时正在进行的教育相关抗议活动，并在针对法国超市冰箱的袭击发生前不久发布。
In Israel in the spring, suspected Iranian hackers going by the name of "Cyber Isnaad Front" claimed responsibility for sabotaging an industrial food processing plant, including infecting its corporate computers with malware, taking over office printers to print out threatening messages and hacking office cameras for use in a propaganda video released in early October. That video included a taunt in French referencing ongoing education-related protests, and came just before the attacks on French supermarket fridges.
网络事件响应公司Profero将以色列这次袭击归因于伊朗伊斯兰革命卫队的一个分支。今年夏天，美国军事基地的军需品商店也经历了类似情况，冰箱和冷冻柜温度一夜之间飙升，导致食品变质。法国政府是第一个正式归咎这波破坏性袭击责任的政府。
Cyber incident response firm Profero attributed the Israel attack to a wing of Iran's Revolutionary Guard Corps Over the summer, commissaries on U.S. military bases also went through something similar, when food spoiled after the temperature shot up inside refrigerators and freezers overnight. The French government is the first to formally assign blame for the wave of destructive attacks.
据ANSSI（法国国家信息系统安全局）称，他们通过一系列数字线索识别出了黑客，包括黑客使用的数字基础设施、与一个宣传机构的关联，以及袭击中留下的波斯语使用“痕迹”。虽然美国全国公共广播电台（NPR）等媒体报道称美国官员怀疑伊朗可能是8月针对美国军事基地袭击的幕后黑手，但五角大楼尚未发表任何官方声明，甚至未正式认定这些中断事件确实是网络攻击造成的。
They were able to identify the hackers through a series of digital clues, including digital infrastructure used by the hackers, connection to a propaganda outlet, and "traces" of the use of Farsi language in the attack, according to ANSSI While NPR and others have reported that U.S. officials suspect Iran may have been behind the attacks on U.S. military bases in August, the Pentagon has not made any official statement, even to conclude that the disruptions were in fact the result of a cyberattack.
“根据我们的政策，为维护调查程序的完整性，国防部[监察长办公室]刑事调查处不讨论正在进行的调查，”战争部监察长办公室发言人莫莉·哈尔珀恩在给美国国家公共电台（NPR）的电子邮件中写道。
"Consistent with our policy and to preserve the integrity of the process, the DOD [Office of Inspector General] Criminal Investigative Service does not discuss ongoing investigations," Mollie Halpern, a spokesperson for the Department of War Office of the Inspector General wrote in an email to NPR.
攻击符合伊朗黑客的惯用手法 如果伊朗黑客是针对欧洲、美国和以色列发动攻击的幕后黑手，网络安全专家表示，这将符合他们所了解的伊朗黑客的战略和目标。
Attacks fit Iranian hackers' modus operandi If Iranian hackers are behind the attacks across Europe, the U.S. and Israel, cybersecurity experts say that would fit with what they know about Iranian hackers' strategy and goals.
“伊朗针对制冷系统的网络攻击，可能代表伊斯兰革命卫队试图通过既具物理破坏性又具心理破坏性的行动，重申伊朗在海外的力量，”网络安全公司Sublime Security威胁情报主管亚历克斯·奥尔良斯对美国国家公共电台表示。“鉴于伊朗的国家资源仍被战争牵制，此类活动继续提供切实且具有成本效益的成果。” “此外，法国专门归因于实施破坏性攻击的伊斯兰革命卫队网络单位‘沙希德·卡维’（Shahid Kaveh），此处正在重复一种模式，”奥尔良斯说。
"Iran's cyberattacks against refrigeration systems likely represents the IRGC attempting to reassert Iranian power abroad through both physically and psychologically disruptive operations," Alex Orleans, the head of threat intelligence at cybersecurity firm Sublime Security, told NPR. "Such activities continue to provide tangible and cost-effect results given how Iran's national resources remain tied down in the war." "Also, Shahid Kaveh, the IRGC cyber unit that the French specifically attributed the disruptive attacks to, is repeating a pattern here," Orleans says.
他援引了8月发生的一系列针对美国水处理厂的网络攻击作为先例，大多数专家认为这些攻击与伊朗有关。美国政府至今尚未正式将那些攻击归因于伊朗。
He referenced a series of cyberattacks on American water treatment plants in August, which most experts believe were linked to Iran, as precedent. The U.S. government has still not officially attributed those attacks.
“该单位再次通过攻击以色列目标磨练其技艺，随后将攻击目标转移到西方的同类系统上，”奥尔良斯说。
"This unit has once again refined its tradecraft through attacks on Israeli targets before shifting their targeting to the same systems in the West," Orleans says.
对于追踪“沙希德·卡维”及与其协同行动的其他伊朗网络单位的人来说，这些攻击完全符合他们的惯用手法。
For those tracking Shahid Kaveh and the other Iranian cyber units that operate alongside it, these attacks fit squarely into their modus operandi.
“‘沙希德·卡维’小组是一个进攻性网络单位，负责伊朗进攻性网络[行动]中一些最著名的案例，”民主保卫基金会网络与技术创新中心非常驻研究员阿里·本·阿姆说。
"Shahid Kaveh group is an offensive cyber unit responsible for some of the greatest hits of Iranian offensive cyber [operations]," says Ari Ben Am, an adjunct fellow at the Foundation for the Defense of Democracies' Center on Cyber and Technology Innovation.
与沙希德·卡维赫有关联的一个组织是“网络复仇者”，他解释说，美国政府将该组织与2023年至2024年冬季期间针对美国水处理设施中以色列制造系统的网络攻击联系在一起。法国政府还提到代表伊朗伊斯兰革命卫队实施的针对法国利益的其他网络攻击，包括针对法国讽刺杂志《查理周刊》的攻击，以及针对2024年巴黎奥运会使用的数字信息亭的另一次攻击。
One group tied to Shahid Kaveh is the Cyber Av3ngers, he explains, which the U.S. government linked to cyberattacks on Israeli-made systems in U.S. water treatment facilities in the winter between 2023 and 2024. The French government also cited other cyberattacks carried out on behalf of the IRGC against French interests, including against the satirical French magazine Charlie Hebdo and another against digital kiosks used at the Paris Olympics in 2024.
保障运营技术安全面临的挑战 网络安全专家表示，针对制冷控制器的攻击凸显了一个长期存在的难题，即保障运营技术的安全，这些技术是控制现实世界物理过程的机器——从水泵到冷却系统。
Challenges in securing operational technology Cybersecurity experts say the attacks on refrigeration controllers have highlighted a yearslong difficulty with securing operational technology, the machines that control physical processes in the real world — from water pumps to cooling systems.
这些机器往往过时且漏洞百出，而且很难修补，因为操作人员无法承担关闭它们并中断包括医疗和交通在内的关键服务的后果。此外，这些机器经常被暴露在公开互联网上——这至少部分是由于与供应商的合同要求，供应商希望远程维护这些系统。
These machines are often outdated and riddled with vulnerabilities, and are very difficult to patch because operators can't afford to shut them down and disrupt critical services including healthcare and transportation. Additionally, the machines are often left exposed to the open internet — often at least in part due to contractual requirements with vendors that want to maintain those systems remotely.
这些因素的结合使其成为一个难以解决的复杂问题 伊朗尚未对这些指控作出回应。然而，法国政府周一的指控可能会促使其他受影响国家也采取行动。
That combination of factors makes it a complicated problem to solve Iran has yet to respond to the accusations. However, Monday's accusation by the French government may lead other affected countries to take action as well.
在巴黎举行的七国集团会议期间，国务卿马尔科·鲁比奥被记者问及美国是否与法国共享了情报以协助其将伊朗黑客攻击归因于伊朗。鲁比奥表示无法置评，但指出“法国非常有能力”。“这些人是什么变态？”他问道。“他们攻击冰箱。法国实际上甚至不涉及这场战争”，指的是始于2月的美国与伊朗之间的战争。“[这些伊朗人]在世界各地干坏事……今天的消息不足为奇，”鲁比奥总结道。Rebecca Rosman 于巴黎发回报道。
During Monday's G7 meeting in Paris, Secretary of State Marco Rubio was asked by journalists whether the U.S. shared information with the French to help with their attribution of the Iranian hacks. Rubio said he couldn't comment, but noted that the "French are quite capable." "What kind of sickos are these people?" he asked. "They attack refrigerators. France is not even involved in this, really," referring to the war between the U.S. and Iran, which began in February. "[These Iranians] do terrible things around the world … the news today doesn't surprise us," Rubio concluded. Rebecca Rosman reported from Paris. cyber attacks France Iran