Overview Over the past two years, Europe’s energy infrastructure has become a primary target for hybrid cyber operations. Attack patterns indicate a shift from classic ransomware to multi-stage reconnaissance campaigns involving OT (Operational Technology) systems, grid-balancing mechanisms, and cross-border power interconnectors. These