Energy Sector Incident Report – 29 December

CERT Polska

(CERT.PL) – a team operating within the structures of NASK – National Research Institute, carrying out the tasks of CSIRT NASK, one of the three national‑level CSIRT teams operating within Poland’s national cybersecurity system.

The Author of This

Report Is:

Table of Contents

Introduction� 4

Attack on Renewable Energy Plants� 5

Architecture of a Renewable Energy Facility� 5

Attack Vector on the GCP� 7

Destructive Activities� 7

Attack on the Large CHP Plant� 12

Attack on a Manufacturing Sector Company� 22

Initial Access� 22

Modification of FortiGate Configuration for Persistence� 2…