REPLAY: Case Study - Danish Critical Infrastructure Attack

In May 2023, 22 companies operating parts of the Danish energy infrastructure were compromised in a coordinated attack. Michael Weng will present details of this attack, including the timeline of attack discovery, steps taken in response by defenders, resolution, and the lessons learned from the incident. He will explain the perspective of the Danish CERT, highlighted through the report released in November 2023.

Michael also describes why an OT/ICS NSM solution would not have detected this attack, hence wouldn't have made a significant difference for the defense of the OT/ICS environments.