# Hackers Claim European Supermarket Fridge Attacks Amid Investigation Doubts Pro-Russian groups claim responsibility for refrigeration cyberattacks, but investigators remain highly skeptical. - **Source:** [Il Sole 24 Ore – Italia](https://www.ilsole24ore.com) - **Published:** 2026-11-04 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/4d011d22-8887-41e1-902b-bf2340206c54 ## European Refrigeration Systems Targeted Starting October 12 in France, cyberattacks hit supermarket refrigeration systems across several European nations, including Italy, the Netherlands, and Finland. Attackers exploited non-updated systems by using stolen access keys from the Danish firm Danfoss. These intrusions caused temperatures to spike to 50 degrees, resulting in significant food spoilage and economic damage. ## Delayed Claim of Responsibility Pro-Russian hacker collectives NoName057(16) and Z-Peintest recently claimed responsibility for the operation via a video. However, this claim surfaced over three weeks after the initial French attacks. Investigators view this delay as a major anomaly, as NoName typically claims operations immediately to maximize propaganda impact and visibility. ## Technical Capability Discrepancies Security experts note a significant gap between the groups. NoName is known for noisy, unsophisticated DDoS attacks, while Z-Peintest is credited with higher technical capabilities. Both groups reportedly orbit the Russian military intelligence service, the GRU. Authorities are now questioning whether these groups actually performed the sophisticated refrigeration intrusions or merely claimed them. ## Investigative Skepticism and Anomalies The claim lacks explicit confirmation on NoName’s official Telegram channel. While the group announced a DDoS attack against Danfoss on November 3, they did not explicitly link it to the refrigeration breaches. Investigators suspect that those who already possess access keys would not need to perform a brute-force DDoS attack on the same target. ## Multiple Hypotheses Under Review Authorities are currently evaluating three main scenarios regarding the claim. The first assumes the groups are responsible. The second suggests an opportunistic claim to boost their reputation. The third, most delicate theory, posits that the video is a deliberate trap set by an external entity to provoke reactions and expose the real perpetrators. ## Potential for Multiple Actors Investigators are exploring the possibility that the European campaign is not a single, unified operation. The initial French incidents may stem from a different, potentially state-sponsored source, while subsequent attacks could be the work of other actors. The entire sequence might be a complex overlap of distinct operations sharing the same target. ## High-Level Security Coordination In Italy, the investigation is managed by the National Cybersecurity Agency, directed by Andrea Quacivi. The operation involves coordination between intelligence services, including AISI and AISE, under the guidance of the Department of Information for Security. Political oversight is provided by Alfredo Mantovano, who recently convened security apparatuses to assess the situation. ## Complexity of Cyber Attribution This case highlights the extreme difficulty of attributing cyberattacks in a volatile digital landscape. As more evidence emerges, the narrative becomes less linear rather than clearer. The discrepancy between digital signatures and actual operational capacity remains a critical challenge for European security agencies attempting to secure vital infrastructure against future threats. ## Sources covering this story - https://www.ilsole24ore.com/art/cyberattacchi-frigo-noname-e-z-peintest-rivendicano-ma-video-non-chiude-caso-francia-possibile-un-altra-matrice-statuale-AJDjeg4B — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._