The global cyber war · Attribution and response

Paris prosecutor seeks warrants for leaders of Shahid Kaveh, a unit it ties to the IRGC, over October fridge attacks; France summons envoy

Confirmed1 distinct origin, 1 independent.

The Paris prosecutor's office said on 9 November it has requested international arrest warrants against the leader of Shahid Kaveh, which it described as an offensive cyber unit affiliated with the Revolutionary Guards, and his two deputies, over the attacks of 11 and 12 October, Al Jazeera reported. CBS News reported the office cited the use of Farsi and IP addresses tracing to devices in Iran, and alleged the offences were carried out to serve a foreign power. Foreign Minister Jean-Noel Barrot said the IRGC carried out the attack, that the Iranian ambassador had been summoned and that sanctions would be pursued at European level. No Iranian response was found as of 9 November.

When
9 November 2026
Where
Paris, France
What
legal
Acting party
Government of France
Against
Shahid Kaveh, Islamic Revolutionary Guard Corps
Attribution
Acknowledged by the acting party. The Paris prosecutor's office and France's foreign minister took these steps in their own names. CBS News reported no immediate response from Iranian authorities and none was found as of 9 November.
In the record
Published 2026-11-09 22:52 UTC · backfilled

Sources

  1. Evidence Al Jazeera Media · Independent origin: Paris prosecutor's office statement, 9 Nov · published 2026-11-09 00:00 UTC The Paris prosecutor’s office said it has requested international arrest warrants against the leader of Shahid Kaveh,
  2. Evidence CBS News Media · Independent origin: Paris prosecutor's office statement, 9 Nov · published 2026-11-09 00:00 UTC the use of the Persian (Farsi) language and IP addresses that trace back to devices located in Iran

History

Cite or reuse

The War Record, "Paris prosecutor seeks warrants for leaders of Shahid Kaveh, a unit it ties to the IRGC, over October fridge attacks; France summons envoy", record ev-20261109-25vf, version 1, https://thewarrecord.com/events/ev-20261109-25vf/

This month's events as JSON (id ev-20261109-25vf) · CC BY 4.0