Skip to content

Back to the catalog

MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks
securityweek.comarticle

MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks

MITRE ATT&CK v20 adds nine Enterprise techniques and sub-techniques, including two prompt injection techniques, abuse of an organization's own AI agents for data theft, application-specific password theft and CAPTCHA bypass. ICS gains campaigns on internet-exposed PLCs at over 30 Minnesota water utilities and an AI-assisted breach of Mexican government bodies. It also adds Nimbus Manticore, The Gentlemen, 15 detection strategies with 38 analytics, and NGate for Mobile.

TL;DR Summarizes the ATT&CK v20 release: new AI-abuse and MFA-bypass techniques, ICS water-utility campaigns, new groups and 15 detection strategies.
Open original ↗
Document

What it is

MITRE released ATT&CK v20 in the week before SecurityWeek's article. Its stated headline change is "expanded coverage of recent adversary activity and tradecraft". The Enterprise domain gets nine additions (techniques and sub-techniques), ICS gets new campaigns and a restructured technique, and Mobile gets two additions.

What changed that affects mappings and detections

Enterprise, AI-related:

  • Prompt injection is split into two techniques: instructions typed directly into an LLM interface, and instructions hidden in material the model ingests.
  • A new technique covers attackers using an organization's own AI agents to steal data.
  • Sub-techniques cover poisoning web content to sway AI search and assistant recommendations, and disrupting LLM-assisted malware analysis.
  • The sub-technique for compromised software dependencies and development tools now also covers IDE and coding agent configuration files.

Enterprise, authentication:

  • A new technique covers theft of application-specific passwords, which let attackers sign in without an MFA prompt.
  • A new CAPTCHA bypass technique has sub-techniques for automatically solving CAPTCHAs and for avoiding them.

ICS:

  • Command and Scripting Interpreter is new, with sub-techniques for six interpreters. It replaces the deprecated Command-Line Interface and Scripting techniques, so existing ICS mappings to those two need updating.
  • Two new sub-techniques cover command and control hidden in DNS and in publish/subscribe protocols.
  • One new campaign covers attacks on internet-exposed PLCs at more than 30 Minnesota water and wastewater utilities, which locked operators out of their systems. A second covers an AI-assisted breach of Mexican government institutions that spanned IT and OT and reached a municipal water utility.

Groups and software:

  • Nimbus Manticore is added as an IRGC-associated espionage group targeting aerospace, defense and telecoms, along with its tools.
  • The Salt Typhoon entry now covers exploitation of network edge devices.
  • The APT38 entry reflects a shift from financial theft to software supply chain attacks.
  • The Gentlemen, a ransomware-as-a-service operation, is added.

Mobile:

  • A technique for delivering malicious apps outside official stores returns, last included in v11.
  • NGate is added. It is malware that relays payment card data through a phone's NFC so attackers can withdraw cash from ATMs.

What to do

The page gives no commands or configuration. The practical items are the 15 new detection strategies (six Enterprise, nine ICS) backed by 38 analytics. The new ICS analytics are designed to ignore routine engineering and maintenance work. Teams that tag detections or coverage to ATT&CK should remap ICS entries off the deprecated techniques.

Caveats

MITRE says attribution for the Minnesota intrusions "remains unconfirmed". Some reports say the wider wave resembles Iranian-affiliated activity. The article does not list technique IDs or analytic contents, so those need the MITRE release notes.

Organisations named here

  • IRGC
  • application-specific passwords
  • APT38
  • CAPTCHA bypass
  • Minnesota water utility PLC attacks
  • NGate
  • Nimbus Manticore

Technologies named here

  • MITRE ATT&CK v20
  • Internet-exposed PLCs at water and wastewater utilities
  • ATT&CK detection strategies
  • Organization-deployed AI agents and LLM interfaces
  • MITRE Fight Fraud Framework
  • AI search and assistant recommendations
  • LLM-assisted malware analysis
  • MITRE security framework for embedded systems
  • Applications using application-specific passwords
  • CAPTCHA checks
  • Network edge devices
  • Mobile devices
  • MITRE ATT&CK
  • LLM

Techniques named here

  • Disrupting LLM-assisted analysis of malware
  • ICS command and control traffic hidden in DNS
  • Mobile
  • Exploitation of network edge devices
  • Software supply chain attacks
  • Prompt Injection

Threat actors named here

  • Nimbus Manticore
  • APT38
  • Mexican government AI-assisted breach
  • NGate
  • Salt Typhoon
  • The Gentlemen

Related in Threat Intel