Red Eléctrica Detects OT System Attacks Before Breach

Download this case study to find out how The Edge™ helped Red Eléctrica safeguard their production ICS/OT network by deflecting a targeted attack into a decoy electrical substation.

Download Case Study

Get it now.

Fill out this form to download the case study and learn how your organization can detect, deter, document and defend against OT attacks.

“CounterCraft helps us prioritize real vulnerabilities, obtaining TTPs and IoCs we wouldn’t be able to get any other way.”

-Mario Castro, Head of Telecommunications of Red Eléctrica

The Industry

Critical Infrastructure

The Challenge

The use of legacy systems no longer supported by the manufacturer is the norm in OT.

There is a fear of disturbing equipment that has been operating fine for years, sometimes decades, for a security patch.

Traditional cybersecurity strategies from the IT world cannot be directly applied to OT.

The Solution

The electricity company used CounterCraft The Edge™ to detect threat actors using a vulnerable deception host to exploit the CVE-2018-13382 vulnerability and gain control of the substation. REE was able to gain visibility on exactly how the attacker carried out recon during the discovery and exploitation phase—before breach.

Gartner predicts 30% of critical infrastructure organizations will experience a security breach by 2025.

Cyber attacks on critical infrastructure and physical systems are on the rise. In 2022, 605 major ransomware OT attacks targeting industrial organizations were detected, marking an 87% increase compared to the previous year. What’s also concerning is that 83% of the total analyzed vulnerabilities reside deep within the ICS network.

Find out how Red Eléctrica was able to lure and deflect the adversary into a decoy electrical substation, while protecting their ICS/OT networks and learning from the adversary’s every movement. Download the case study to learn more about how we protect organizations’ industrial control systems from attacks.

Download now.

Detect, deter and defend against cyberattacks.