International Standoff 17 Cyberbattle
Cyber exercise
finished
Energy
We are used to electricity just being there. While lights are on at home, the metro carries passengers, and factories melt metal, no one thinks about the work of power engineers.
From the outside, the industry looks like a monolithic physical machine of pipes and wires. But in reality, the energy sector of State F is a giant IT infrastructure. Dispatch centers, substations, monitoring, commercial metering, and billing systems have long merged into a single network where servers and algorithms manage megawatts.
Key industry players:
GenPower F — the heart of generation. The company produces megawatts for the entire State F. It operates thermal and hydroelectric power plants, wind farms, and industrial energy storage systems. GenPower F balances output every second based on demand and even weather forecasts to keep the country's critical infrastructure running without failure.
GridF — the grid company. It manages backbone and distribution networks, substations, and coordinates field crews. Inside GridF operates a complex digital mechanism: dispatching systems, ICS, smart meters, and proprietary telecom networks. Terabytes of telemetry flow through the company's infrastructure along with electricity.
SO‑F — the system operator. It maintains the balance of power and frequency in the Unified Energy System of State F, coordinates the work of generation and grid infrastructure, approves repairs, and manages emergency modes.
ClearingF — the financial hub of the wholesale market. Deals are registered here, green energy certificates are processed, and all interbank settlements of the energy sector take place. ClearingF is also a powerful IT company: it develops load forecasting platforms and has centralized access to parts of other market participants' IT infrastructure.
EnergySupply F — the guaranteed electricity supplier and the public face of the industry. Through the company's services, people pay bills and submit meter readings. EnergySupply F continuously analyzes consumption profiles, calculates tariffs, interacts with the regulator, and processes commercial metering data coming from GridF networks.
ERA F — the Energy Commission of State F. It regulates the electricity market: sets tariffs, issues licenses to market participants, and monitors compliance with mandatory standards. The organization analyzes key energy system indicators, records imbalances, and in crisis situations coordinates market participants' actions through a 24/7 alert system and duty service.
For a long time, the residents of State F took energy for granted. People got used to paying bills with a couple of taps on their smartphones, and factories entrusted energy consumption control to automation. But it is this digitalization that has turned the industry into an ideal target for hacker attacks.
Attackers are targeting dispatching control systems, SCADA and MES platforms, certification systems, customer portals, commercial metering and monitoring systems, and centralized server administration tools.
Today, a single compromised account or an unpatched vulnerability in an industrial gateway is sometimes enough for the entire country to feel the consequences of an attack. Tampering with consumption data instantly generates billions in losses and paralyzes financial flows. Hacking ICS and stopping a turbine at a thermal power plant leaves districts without electricity and heat. A substation failure halts factories, paralyzes transport, and disables water supply systems.
Acronyms like "SCADA" and "ICS" have long migrated from technical manuals to evening news headlines. Large business owners start their mornings with power system status reports, knowing that any digital failure in the energy sector will instantly trigger a chain reaction affecting retail, telecom, and industry.
Attacker metrics
Critical events
47reports
submitted
submitted
42critical events
triggered
triggered
Loading data
Vulnerabilities
0vulnerabilities
discovered
discovered
Severity:
Critical: undefined
High: undefined
Medium: undefined
Low: undefined
Defender metrics
0
incidents
recorded
recorded
0
critical events
investigated
investigated
Results
Rank
Team
Triggered events
Event points
Discovered vulnerabilities
Vulnerability points
Bonus and penalty points
Total points
1
cR4.sh
9
31,578
24
7,300
+500
39,378
2
FR13NDS & RHACKERS
6
14,958
13
4,200
19,158
3
Dataeli&only_f4st
5
13,296
16
4,500
+300
18,096
4
DreamTeam
5
11,634
15
4,800
16,434
5
EvilBunnyWrote
4
6,648
15
4,800
+100
11,548
6
T3amW1pe
3
4,986
18
5,400
10,386
7
Cyb7rC0d3#
3
4,986
11
3,600
8,586
8
Odoohondoo x GWTW
2
3,324
9
3,000
6,324
9
ℭ𝔲𝔩𝔱
1
1,662
6
1,900
3,562
10
VNPT-VCI
1
1,662
6
1,900
3,562
11
SB3U
1
1,662
6
1,900
3,562
12
SITON
1
1,662
5
1,500
3,162
13
T.H.R.E.A.T.
1
1,662
1
300
1,962
14
HackerLab
0
0
5
1,600
1,600
15
Space x Pwn3dP0ss3
0
0
3
1,000
1,000
16
AgroTeam
0
0
3
1,000
1,000
17
KiberS
0
0
3
700
700
18
SPbCTF
0
0
3
700
700
19
HUST RED
0
0
2
600
600
20
Redac7d
0
0
1
300
300







