MWAA 2023 Water Utility Red vs. Blue scenario

Summary

The Municipal Water Authority of Aliquippa (MWAA) cyberattack from November 2023 is a significant incident that highlights the vulnerabilities in critical water infrastructure.

Here is a the AutoTableTop™ scenario that has more details associated with the document

MWAA

Red vs. Blue Scenario

Here is the mission briefing within Red vs. Blue:

Your mission is to secure your company’s network by improving your defenses, reducing risk by implementing policies and managing and procure staff and budget.

Municipal Water Authority of Aliquippa got hacked – it was all over the papers. It was a poor network design that got them to this point and by the time they got popped, everyone knew that having an internet-facing HMI was the chess equivalent of offering scholar’s Mate. At least in this simulation you won’t have to resign because of wearing the wrong pair of pants….

You can win the game by doing any of the following:
– eliminating all vulnerabilities within the assets on the network
-increasing the threat intelligence score to 100%
– outlasting the Red Team when the turns expire

THREATGEN Support Staff (specifically Grzegorz Piekarski)

And here is the network map that you will be working with as the Blue Team:

MWAA Red vs. Blue scenario network map
MWAA network map used within ThreatGEN® Red vs. Blue

Copyright © 2025 by Derezzed Inc. D/B/A ThreatGEN.

Categories