MITRE ATT&CK v20 adds AI abuse, MFA bypass, Minnesota water utility PLC attacks and new threat actor entries
MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web content to sway AI search and assistant recommendations, theft of application-specific passwords that bypass MFA prompts, and CAPTCHA bypass. ICS adds campaigns covering attacks on internet-exposed PLCs at more than 30 water and wastewater utilities in Minnesota and an AI-assisted breach of Mexican government institutions that reached a municipal water utility. MITRE also added or updated threat actor entries and published 15 new detection strategies backed by 38 analytics.
Technical Details
- Enterprise: the sub-technique for compromised software dependencies and development tools now also covers IDE and coding agent configuration files. Another sub-technique covers disrupting LLM-assisted malware analysis.
- ICS: a new Command and Scripting Interpreter technique with sub-techniques for six interpreters replaces the deprecated Command-Line Interface and Scripting techniques. Two new sub-techniques cover command and control hidden in DNS and in publish/subscribe protocols.
- Minnesota campaign: attacks on exposed PLCs locked operators out of their systems. Some reports say the wider wave resembles Iranian-affiliated activity, but MITRE states attribution "remains unconfirmed".
- Mexico campaign: the AI-assisted breach spanned IT and OT.
- Threat actors: Nimbus Manticore (IRGC-associated espionage group targeting aerospace, defense and telecoms) was added along with its tools. Salt Typhoon now covers exploitation of network edge devices. APT38 reflects a shift from financial theft to software supply chain attacks. The Gentlemen, a ransomware-as-a-service operation, was also added.
- Mobile: the technique for delivering malicious apps outside official stores returns (last included in v11). NGate was added; it relays payment card data through a phone's NFC to enable ATM cash withdrawals.
- Detection: 15 new detection strategies (six Enterprise, nine ICS) and 38 analytics. The new ICS analytics are designed to ignore routine engineering and maintenance work.
Remediation
The article does not give specific remediation steps. Defenders can use the new techniques, detection strategies and analytics to update threat models and detection coverage, particularly for AI agent abuse, MFA bypass and internet-exposed ICS assets.
Linha do tempo
-
MITRE ATT&CK v20 adds AI abuse, MFA bypass, Minnesota water utility PLC attacks and new threat actor entries
ler a análise desta fonte ocultar
MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web content to sway AI search and assistant recommendations, theft of application-specific passwords that bypass MFA prompts, and CAPTCHA bypass. ICS adds campaigns covering attacks on internet-exposed PLCs at more than 30 water and wastewater utilities in Minnesota and an AI-assisted breach of Mexican government institutions that reached a municipal water utility. MITRE also added or updated threat actor entries and published 15 new detection strategies backed by 38 analytics.
Technical Details
- Enterprise: the sub-technique for compromised software dependencies and development tools now also covers IDE and coding agent configuration files. Another sub-technique covers disrupting LLM-assisted malware analysis.
- ICS: a new Command and Scripting Interpreter technique with sub-techniques for six interpreters replaces the deprecated Command-Line Interface and Scripting techniques. Two new sub-techniques cover command and control hidden in DNS and in publish/subscribe protocols.
- Minnesota campaign: attacks on exposed PLCs locked operators out of their systems. Some reports say the wider wave resembles Iranian-affiliated activity, but MITRE states attribution "remains unconfirmed".
- Mexico campaign: the AI-assisted breach spanned IT and OT.
- Threat actors: Nimbus Manticore (IRGC-associated espionage group targeting aerospace, defense and telecoms) was added along with its tools. Salt Typhoon now covers exploitation of network edge devices. APT38 reflects a shift from financial theft to software supply chain attacks. The Gentlemen, a ransomware-as-a-service operation, was also added.
- Mobile: the technique for delivering malicious apps outside official stores returns (last included in v11). NGate was added; it relays payment card data through a phone's NFC to enable ATM cash withdrawals.
- Detection: 15 new detection strategies (six Enterprise, nine ICS) and 38 analytics. The new ICS analytics are designed to ignore routine engineering and maintenance work.
Remediation
The article does not give specific remediation steps. Defenders can use the new techniques, detection strategies and analytics to update threat models and detection coverage, particularly for AI agent abuse, MFA bypass and internet-exposed ICS assets.