MWAA 2023 Water Utility Red vs. Blue scenario
The Municipal Water Authority of Aliquippa (MWAA) cyberattack from November 2023 is a significant incident that highlights the vulnerabilities in critical water infrastructure.
Here is a the AutoTableTop™ scenario that has more details associated with the document
Here is the mission briefing within Red vs. Blue:
Your mission is to secure your company’s network by improving your defenses, reducing risk by implementing policies and managing and procure staff and budget.Municipal Water Authority of Aliquippa got hacked – it was all over the papers. It was a poor network design that got them to this point and by the time they got popped, everyone knew that having an internet-facing HMI was the chess equivalent of offering scholar’s Mate. At least in this simulation you won’t have to resign because of wearing the wrong pair of pants….You can win the game by doing any of the following:– eliminating all vulnerabilities within the assets on the network-increasing the threat intelligence score to 100%– outlasting the Red Team when the turns expireTHREATGEN Support Staff (specifically Grzegorz Piekarski)
Your mission is to secure your company’s network by improving your defenses, reducing risk by implementing policies and managing and procure staff and budget.Municipal Water Authority of Aliquippa got hacked – it was all over the papers. It was a poor network design that got them to this point and by the time they got popped, everyone knew that having an internet-facing HMI was the chess equivalent of offering scholar’s Mate. At least in this simulation you won’t have to resign because of wearing the wrong pair of pants….You can win the game by doing any of the following:– eliminating all vulnerabilities within the assets on the network-increasing the threat intelligence score to 100%– outlasting the Red Team when the turns expire
And here is the network map that you will be working with as the Blue Team:
Copyright © 2025 by Derezzed Inc. D/B/A ThreatGEN.