Energy

We are used to electricity just being there. While lights are on at home, the metro carries passengers, and factories melt metal, no one thinks about the work of power engineers.
From the outside, the industry looks like a monolithic physical machine of pipes and wires. But in reality, the energy sector of State F is a giant IT infrastructure. Dispatch centers, substations, monitoring, commercial metering, and billing systems have long merged into a single network where servers and algorithms manage megawatts.
Key industry players:
GenPower F — the heart of generation. The company produces megawatts for the entire State F. It operates thermal and hydroelectric power plants, wind farms, and industrial energy storage systems. GenPower F balances output every second based on demand and even weather forecasts to keep the country's critical infrastructure running without failure.
GridF — the grid company. It manages backbone and distribution networks, substations, and coordinates field crews. Inside GridF operates a complex digital mechanism: dispatching systems, ICS, smart meters, and proprietary telecom networks. Terabytes of telemetry flow through the company's infrastructure along with electricity.
SO‑F — the system operator. It maintains the balance of power and frequency in the Unified Energy System of State F, coordinates the work of generation and grid infrastructure, approves repairs, and manages emergency modes.
ClearingF — the financial hub of the wholesale market. Deals are registered here, green energy certificates are processed, and all interbank settlements of the energy sector take place. ClearingF is also a powerful IT company: it develops load forecasting platforms and has centralized access to parts of other market participants' IT infrastructure.
EnergySupply F — the guaranteed electricity supplier and the public face of the industry. Through the company's services, people pay bills and submit meter readings. EnergySupply F continuously analyzes consumption profiles, calculates tariffs, interacts with the regulator, and processes commercial metering data coming from GridF networks.
ERA F — the Energy Commission of State F. It regulates the electricity market: sets tariffs, issues licenses to market participants, and monitors compliance with mandatory standards. The organization analyzes key energy system indicators, records imbalances, and in crisis situations coordinates market participants' actions through a 24/7 alert system and duty service.
For a long time, the residents of State F took energy for granted. People got used to paying bills with a couple of taps on their smartphones, and factories entrusted energy consumption control to automation. But it is this digitalization that has turned the industry into an ideal target for hacker attacks.
Attackers are targeting dispatching control systems, SCADA and MES platforms, certification systems, customer portals, commercial metering and monitoring systems, and centralized server administration tools.
Today, a single compromised account or an unpatched vulnerability in an industrial gateway is sometimes enough for the entire country to feel the consequences of an attack. Tampering with consumption data instantly generates billions in losses and paralyzes financial flows. Hacking ICS and stopping a turbine at a thermal power plant leaves districts without electricity and heat. A substation failure halts factories, paralyzes transport, and disables water supply systems.
Acronyms like "SCADA" and "ICS" have long migrated from technical manuals to evening news headlines. Large business owners start their mornings with power system status reports, knowing that any digital failure in the energy sector will instantly trigger a chain reaction affecting retail, telecom, and industry.

Attacker metrics

Critical events
47reports
submitted
42critical events
triggered
Loading data
Vulnerabilities
0vulnerabilities
discovered
Severity:
Critical: undefined
High: undefined
Medium: undefined
Low: undefined

Defender metrics

D0br03 utr0
Monitoring
IZOLENTA
Monitoring
Threat Nuggets
Monitoring
0
incidents
recorded
0
critical events
investigated

Results

Rank
Team
Triggered events
Event points
Discovered vulnerabilities
Vulnerability points
Bonus and penalty points
Total points
1

cR4.sh

9
31,578
24
7,300
+500
39,378
2

FR13NDS & RHACKERS

6
14,958
13
4,200
19,158
3

Dataeli&only_f4st

5
13,296
16
4,500
+300
18,096
4

DreamTeam

5
11,634
15
4,800
16,434
5

EvilBunnyWrote

4
6,648
15
4,800
+100
11,548
6

T3amW1pe

3
4,986
18
5,400
10,386
7

Cyb7rC0d3#

3
4,986
11
3,600
8,586
8

Odoohondoo x GWTW

2
3,324
9
3,000
6,324
9

ℭ𝔲𝔩𝔱

1
1,662
6
1,900
3,562
10

VNPT-VCI

1
1,662
6
1,900
3,562
11

SB3U

1
1,662
6
1,900
3,562
12

SITON

1
1,662
5
1,500
3,162
13

T.H.R.E.A.T.

1
1,662
1
300
1,962
14

HackerLab

0
0
5
1,600
1,600
15

Space x Pwn3dP0ss3

0
0
3
1,000
1,000
16

AgroTeam

0
0
3
1,000
1,000
17

KiberS

0
0
3
700
700
18

SPbCTF

0
0
3
700
700
19

HUST RED

0
0
2
600
600
20

Redac7d

0
0
1
300
300