The Standoff is a cyberspace where we re-create operational and business processes of real industrial, energy, transport, and finance companies.

Softville

Hello World Systems is an IT company that provides software products, solutions, and services domestically to government agencies as well as internationally to companies in a range of industries including finance, manufacturing, and healthcare. The company has over 5,000 employees in offices across the country. Hello World Systems' infrastructure includes many locally deployed services: web applications, a mail server, ERP and CRM systems, and a social network.

# Scope
The external perimeter of the segment is within subnet 10.127.11.0/24.

## Entry points
* 10.127.11.130
* 10.127.11.131
* 10.127.11.146
* 10.127.11.152
* 10.127.11.217
* 10.127.11.221
* 10.127.11.254

Hello World Systems

Produces electricity to supply the needs of the population and to power several large production facilities

Big Bro Group

A company with the underlying IT infrastructure: a mail server, web applications, ERP and CRM systems, and other services

Conducts financial transactions between individuals and organizations, carries out bank-to-bank transfers, and provides online banking services

STF Bank

Hackers infected hundreds of thousands of computers in a single day using a supply chain attack that involved penetrating the network of software developer Hello World Systems and injecting malicious code into the company's product updates. Hello World Systems is facing huge financial losses and damage to its reputation, while end users are losing trust in software vendors and becoming reluctant to install updates.

Injection of malicious code into software

Hello World Systems was attacked by an APT group. The hackers stole over 10 TB of sensitive files and are threatening to make them public.

The hackers have already released some of the files on the internet and say that they will release more unless Hello World Systems pays them a $10.9 million ransom. The company is likely to suffer significant reputational damage and lose valuable partnerships.

Leak of partner data

Cybercriminals attacked Hello World Systems and stole the personal data of 90% of the company's employees, including information on salaries and bonuses. The stolen data can be used to send phishing emails.

The incident has caused significant reputational damage to Hello World Systems. The company is facing fines and its share price is plummeting. Disgruntled employees are threatening to quit their jobs.

Leak of employee personal data

Hackers stole 20 GB of data from Hello World Systems, including data on hardware vulnerabilities that exist in the company's equipment.

Some data was released on the internet: source code packages, video tutorials, debugging files, and other documents are now available for everyone who wants to learn about the vulnerabilities. The hackers are selling software license files at a fraction of their retail value, which will result in major financial losses for the company.

Leak of confidential information

undefi

Software developer Hello World Systems was attacked today when a ransomware virus was released into its network. Company management announced that technical support is currently unavailable, the company cannot sell some of its products, and it is unable to deliver solutions that have already been paid for. According to a Hello World Systems spokesperson, it will take at least several weeks to restore their systems because backups were mistakenly kept in the same location as the production system.

Customers are raging on social media: "I'm not going to wait for weeks to get the product I paid for, give me my money back!", "The company had no concern whatsoever for information security! How can anyone trust them now?"

The company is facing huge losses as angry customers take their business elsewhere.