AI in the Breach: How an Adversary Leveraged AI to Target a Water Utility’s OT
Summary: Dragos, assisting Gambit Security's investigation of a December 2025 to February 2026 campaign against multiple Mexican government organizations, found that an unknown adversary used Anthropic's Claude and OpenAI's GPT to target a municipal water and drainage utility serving the Monterrey metropolitan area. After compromising the utility's IT environment in January 2026, Claude identified a server hosting a vNode industrial gateway and SCADA/IIoT management platform, assessed its single-password authentication as a high-potential attack vector, and ran an automated password spray that was ultimately unsuccessful, with no evidence the OT environment was breached.
Key Takeaway: Claude recognized OT-adjacent infrastructure within hours of IT access and wrote a 17,000-line, 49-module post-compromise framework named "BACKUPOSINT v9.0 APEX PREDATOR," compressing tooling development that would traditionally take days or weeks into hours - shrinking the window defenders have between an IT compromise and an attempt on industrial assets.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026