FBI Warns: AI Powers Critical Infrastructure Attacks

Hackers are increasingly leveraging artificial intelligence to target and compromise critical US infrastructure, including energy and water systems. The FBI, in conjunction with federal agencies like the NSA, has alerted the public to an active threat where adversaries are using AI to craft sophisticated 'exploitation scripts.'

These AI-generated malicious code allows threat actors to more easily access vulnerable industrial control systems, particularly Siemens-developed systems. The AI's capability to harness public information and mimic legitimate software has been instrumental in gaining initial access, compromising credentials, and launching denial-of-service attacks.

The FBI noted that this AI integration dramatically reduces the technical expertise and time required for hackers to develop tools. This advancement enables adversaries to adapt quickly to defensive measures and exploit systems, such as programmable logic controllers (PLCs), that have unconfigured or default authentication.

The warning comes amidst a string of recent attacks on water utility providers across at least 12 states. While the specific AI used has not been identified, the trend highlights a growing reliance on AI by various hacking groups, including state-sponsored entities, to amplify their operations and scale their efforts.