Case Study: Naftogaz enhances critical infrastructure protection with YubiKeys from Yubico

Naftogaz blocks phishing with Yubico’s YubiKeys in 2 months

Naftogaz, Ukraine's state-owned oil and gas company, faced an extreme and constant threat from cyber attacks, with its critical infrastructure targeted over 800 times daily. These attacks, which intensified during the war, aimed to steal data, encrypt systems, and destabilize the energy supply. The head of security controls identified the human factor and phishing as a primary vulnerability, as even trained employees could be tricked into revealing passwords. To combat this, Naftogaz sought to eliminate passwords entirely and turned to vendor Yubico for a solution using YubiKeys.

Through Yubico's Secure it Forward program, Naftogaz received a donation of YubiKey 5 NFC and 5C NFC security keys. Implementing these keys over two months allowed for secure, passwordless authentication for logging into workstations, Microsoft Office 365, and other services. The results were immediate: the subsidiary that implemented the keys, Naftogaz-Bezreka, now has an extremely low probability of phishing attacks and is considered the most secure company within the group. Yubico's solution enhanced security for privileged users, improved the user experience, and provided a critical defense for Ukraine's energy infrastructure during wartime.

Naftogaz