1. Quick Reference

Element Details
Malmon Raspberry Robin (USB Worm/Stealth) ⭐⭐⭐
Difficulty Tier Tier 2 (Advanced)
Scenario Variant Financial Branches - Month-End Processing
Organizational Context Community First Bank: 45 branch locations, 1,200 employees, month-end transaction processing
Primary Stakes Customer financial data + Banking operations + Regulatory compliance + Transaction security
Recommended Formats Full Game, Advanced Challenge (120-180 min)
Essential NPCs Janet Foster (Regional Director), Carlos Martinez (IT Security Manager), Diana Chen (Branch Operations Manager), Robert Kim (Compliance Officer)

Scenario Hook

β€œCommunity First Bank is processing peak month-end transactions when branch managers report USB drives used for daily transaction reconciliation and audit procedures are creating suspicious folder-like files spreading through routine banking workflows.”

Victory Condition

Contain USB worm across 45 branches, protect customer financial data, maintain month-end processing, ensure regulatory compliance, secure banking USB workflows.


2. Organization Context


2-12. Complete Sections

Key Configuration: Month-end timeline pressure, multi-branch coordination, banking regulatory compliance, customer data protection

NPCs:

  • Janet Foster: Managing 45 branches during month-end with USB malware spreading
  • Carlos Martinez: Investigating USB worm bypassing financial network security
  • Diana Chen: Reporting infected USB affecting transaction reconciliation
  • Robert Kim: Assessing customer data exposure and regulatory notifications

Response Options: Branch isolation (+3), USB workflow quarantine (+3), transaction system protection (+2)

Round-by-Round: Discovery β†’ Multi-branch spread confirmed β†’ Critical decision on operations vs containment

Type Effectiveness: USB Worm weak to workflow isolation (+3), resists network-only defenses (-1)

Key Challenge: Carlos discovers 45 branches using shared USB procedures, month-end cannot be delayed, customer financial data potentially exposed

Cross-References:


Streamlined planning doc emphasizing multi-branch USB workflow vulnerabilities and financial regulatory compliance during month-end operations.