NPCC Security Bulletin: E-ISAC Ransomware Attack Techniques

TLP: WHITE

October 13, 2021

NPCC is publishing this security bulletin to engage and inform NPCC entities on aspects of Bulk Power System security and reliability.

E-ISAC Ransomware Attack Techniques

E-ISAC has released a TLP Green Ransomware Attack Techniques Document

Document Access: To access the document login to the E-ISAC Portal

TRAFFIC LIGHT PROTOCOL (TLP) Green Restrictions: Recipients may share TLP: GREEN information with peers and partner organizations within their sector or community, but not via publicly accessible channels. Information in this category can be circulated widely within a particular community. TLP: GREEN information may not be released outside of the community.

Document Key Topics:

• Reoccurring or common intrusion vulnerabilities
• Threat classification and detection models
• Adversary Tactics, Techniques, and Procedures (TTPs)
• Analysis of software employed by identified Advanced Persistent Threats (APTs)
• Ransomware References and Resources