The Standoff is a cyberspace where we re-create operational and business processes of real industrial, energy, transport, and finance companies.

Softville

Big Bro Group is a large holding company. As part of its investment program, it recently acquired a power company that operates several generation units and supplies electricity to the city center through its own distribution network. To address reliability concerns, Big Bro Group allocated funds for maintenance and repair of equipment. The CEOs have also implemented a program to modernize the existing energy facilities as well as to build new ones. The program has already resulted in the construction of a new substation: it has efficient and reliable power transformers, digital protection relays, and an industrial control system (ICS) that uses the IEC 61850 protocol stack for communication between devices.

# Scope
The external perimeter of the segment is within subnet 10.127.13.0/24.

## Entry points
* 10.127.13.151
* 10.127.13.164
* 10.127.13.175
* 10.127.13.200
* 10.127.13.222
* 10.127.13.248

Big Bro Group

Produces electricity to supply the needs of the population and to power several large production facilities

A company with the underlying IT infrastructure: a mail server, web applications, ERP and CRM systems, and other services

Hello World Systems

Conducts financial transactions between individuals and organizations, carries out bank-to-bank transfers, and provides online banking services

STF Bank

A cyberattack shut down power generators at a hydroelectric station, leading to a partial blackout in the nearby city.

Shutdown of hydroelectric plant generator

Hackers connected to the line between the supplier hub and consumer meters, which enabled them to send unauthorized commands to disconnect the load relay. This lead to massive power outages across the capital.

Disconnection of consumers from the power grid by hacking meters

Hackers gained access to a network used for communication with electricity meters and were able to change the transformation ratios. They can now commit various types of meter fraud, including not paying for electricity, or making consumers pay other people's bills.

Manipulation of electricity meter readings

The first documents stolen from Big Bro Group appeared on the dark web today. The files published on the cybercriminals' website contain data about Big Bro Group's contracts.

The company's partners have already announced their intention to reconsider their relations with Big Bro Group: no one wants to deal with a company that cannot protect confidential information.

Leak of information on company contracts

More than 30,000 computers in Big Bro Group's network were infected by ransomware in an APT attack that left hard drives corrupted and brought the business to a standstill for 10 days.

Ransomware attack

Cybercriminals hacked into Big Bro Group's internal network and stole documents containing data about the company's partners and details of negotiations on forthcoming deals. The attackers have already emailed ransom demands to the victims.

Outraged partners are demanding action from Big Bro Group. The company is facing huge losses.