Energy Organizations Continue to be Compromised Globally

Electric-sector-associated organizations are being targeted by adversaries that exploit trusted third parties: ENTSO-E confirmed an office-network compromise, and the New Mexico Public Regulation Commission experienced an alleged ransomware attack that disrupted public web and filing services. The report highlights risks from supply-chain and third-party relationships (citing Allanite activity and PupyRAT observed in related activity), warns that attackers can harvest information useful for follow-on operations against utilities, and recommends monitoring third-party links and strengthening phishing defenses.