A competition for cybersecurity experts from across the world, where they can test their skills on replicas of systems and software from various industries

cyber_battle

Standoff 14: the international cyberbattle

Command and Defend

Energy

Coinhako

Et-Blue

CyPeaceJutsu

Secops Garage

M53 Blue

Langit Biru

Pasukan Biru

SmurfVillage

CyberPatrol

UnitedSOCs

ProtectIT

STFware provides hosting services and develops software for organizations across various sectors. For instance, it maintains a ticket sales service and a platform providing state services for citizens.

Hackers could bypass secure software development mechanisms and inject malicious code into applications, which would then spread across different organizations and paralyze their operations. Hackers could also seize the company's domain infrastructure to gain full control over its systems and servers.

Cloud services, streaming platforms, and the flagship Open City app used by the entire population of State F are also under threat.

STFware

Your shell not pass

Tube produces, refines, stores, and sells oil and gas. Its assets include an oil refinery, pipelines with pumping stations, tankage facilities, and oil-product loading stations for rail and sea transportation.

In State F, a major uptick in the gas industry is on the horizon as Tube sets up new drilling facilities and prepares to commission a natural gas processing plant while also recruiting staff to work there.

Cyberattacks on the oil and gas industry can affect other sectors in State F beyond the target companies. For instance, malicious interference could damage product quality at paint-and-varnish and tire factories, while disruptions in the operation of an oil pipeline, rectification column, electric dehydrator, or hydrocracking reactor could cause a fuel crisis in State F.

Tube

KARL?!

Banks in State F long ago ceased to be simply a place where money is kept. Here, people pay for purchases by QR code, arrange loans in a matter of minutes, open accounts without visiting an office, and transfer digital rubles between organisations.

The financial landscape is shaped by three major players. Global Digital Bank develops digital services and serves clients entirely online. First Partner Bank bets on a partnership ecosystem, QR payments, and the digital ruble platform. And Commercial Bank of Standoff is responsible for the corporate segment, interbank settlements, and business lending.

Attackers have access both to the banks’ external services and to their internal infrastructure: web portals, Kubernetes clusters, interbank transfer systems, customer databases, operators’ workstations, and digital ruble interfaces. The compromise of a single vulnerable system here rarely remains a local problem. The takeover of a container can lead to an attack on the entire cluster; hacking an internal portal can halt the connection of partners to the instant payment system; and data tampering on the digital ruble platform can cause panic among businesses and regulators.

The consequences of successful attacks quickly extend beyond a single company. Leaks of passport data trigger a wave of fraud and lawsuits. Disruption of interbank transfers hits supplies, salaries, and settlements between enterprises. The compromise of digital ruble systems endangers trust in the state’s new financial infrastructure.

When financial services work invisibly, hardly anyone thinks about them. But the moment the ability to pay for a purchase, receive a salary, or transfer money to a supplier disappears, digital comfort instantly turns to chaos.

Banking

Commercial Bank of Standoff

First Partner Bank 

Global Digital Bank

Results

Leaderboard of attacker teams