- MITRE said the Enterprise domain received nine additions, counting techniques and sub-techniques.
- MITRE added an ICS campaign covering attacks on internet-exposed PLCs at more than 30 Minnesota water and wastewater utilities.
- MITRE released version 20 of its ATT&CK framework last week.
MITRE said it last week released version 20 of its ATT&CK framework, adding techniques and sub-techniques for attacks involving AI systems, application-specific passwords, CAPTCHA checks and development tools.
The update gives defenders a framework for activity that can involve an organization’s own AI agents, poisoned web content that influences AI search and assistant recommendations, and sign-ins without an MFA prompt after application-specific passwords are obtained.
It also records attacks on internet-exposed programmable logic controllers at more than 30 Minnesota water and wastewater utilities, where operators were locked out of their systems. Attribution for those intrusions remains unconfirmed.
On this page
ATT&CK version 20 maps attacks around AI, MFA and CAPTCHA
MITRE said the biggest change in version 20 is “expanded coverage of recent adversary activity and tradecraft.” The Enterprise domain received nine additions, counting techniques and sub-techniques.
The new AI-related entries cover poisoning web content to sway AI search and assistant recommendations, as well as disrupting LLM-assisted analysis of malware. MITRE said the additions help capture “how adversaries get around Multi-Factor Authentication, bot checks, and AI systems.”
The update also tracks application-specific passwords that attackers can use to sign in without an MFA prompt. Another technique addresses bypassing CAPTCHA checks, with sub-techniques for automatically solving them or avoiding them.
The framework adds water-utility campaigns and detection content
MITRE said the Minnesota campaign involved internet-exposed PLCs and left operators locked out of their systems. It said attribution remains unconfirmed.
MITRE said a second campaign documents an AI-assisted breach of Mexican government institutions that spanned IT and OT and reached a municipal water utility.
The release adds 15 detection strategies, including six for Enterprise and nine for ICS, backed by 38 analytics. MITRE said the new ICS analytics are designed to ignore routine engineering and maintenance work.
MITRE expands group, mobile and software-supply-chain coverage
MITRE said the compromised software dependencies and development tools sub-technique now also covers IDE and coding-agent configuration files. It added Nimbus Manticore, which it described as an IRGC-associated espionage group targeting aerospace, defense and telecoms organizations.
MITRE said the Salt Typhoon entry now covers exploitation of network edge devices, while the APT38 entry reflects a shift from financial activity to software supply-chain attacks. It also added The Gentlemen, a group running a ransomware-as-a-service operation.
In the Mobile domain, MITRE said it brought back a technique for delivering malicious apps outside official stores, last included in version 11. It also added NGate, malware that relays payment card data through a phone’s NFC and allows attackers to withdraw cash from ATMs.
MITRE said attribution for the Minnesota utility intrusions remains unconfirmed. The release also records a second campaign involving an AI-assisted breach of Mexican government institutions that spanned IT and OT and reached a municipal water utility.
FAQ
What changed in MITRE ATT&CK version 20?
MITRE said it added nine Enterprise techniques and sub-techniques, new AI, MFA and CAPTCHA coverage, water-utility campaign entries, 15 detection strategies and 38 analytics.
Does ATT&CK version 20 cover AI attacks?
MITRE said it covers using an organization’s own AI agents in attacks involving data, poisoning web content to influence AI recommendations and disrupting LLM-assisted malware analysis.
What water-utility attacks did MITRE add?
MITRE said a new ICS campaign covers attacks on internet-exposed PLCs at more than 30 Minnesota water and wastewater utilities. It said operators were locked out of their systems and attribution remains unconfirmed.
Does the update cover MFA bypass?
MITRE said it tracks application-specific passwords that attackers can use to sign in without an MFA prompt, along with CAPTCHA-bypass techniques.
What new mobile malware is in ATT&CK version 20?
MITRE said it added NGate, which relays payment card data through a phone’s NFC and allows ATM cash withdrawals.
Sources
How we checked this story
| Claim | Source | Status |
|---|---|---|
| MITRE released version 20 of its ATT&CK framework last week. | MITRE, via SecurityWeek | Attributed |
| MITRE said ATT&CK version 20’s biggest change was expanded coverage of recent adversary activity and tradecraft. | MITRE, via SecurityWeek | Attributed |
| MITRE said the Enterprise domain received nine additions, including techniques and sub-techniques. | MITRE, via SecurityWeek | Attributed |
| MITRE said a new technique describes attackers using an organization’s own AI agents to steal data. | MITRE, via SecurityWeek | Attributed |
| MITRE said new sub-techniques cover poisoning web content to influence AI search and assistant recommendations. | MITRE, via SecurityWeek | Attributed |
| MITRE said new sub-techniques cover disrupting LLM-assisted malware analysis. | MITRE, via SecurityWeek | Attributed |
| MITRE said a new technique tracks theft of application-specific passwords that can enable sign-in without an MFA prompt. | MITRE, via SecurityWeek | Attributed |
| MITRE said another new technique addresses bypassing CAPTCHA checks, with sub-techniques for automatically solving or avoiding them. | MITRE, via SecurityWeek | Attributed |
| MITRE said the compromised software dependencies and development tools sub-technique now covers IDE and coding agent configuration files. | MITRE, via SecurityWeek | Attributed |
| MITRE said the additions help capture how adversaries get around MFA, bot checks and AI systems. | MITRE, via SecurityWeek | Attributed |
| MITRE said a new ICS campaign tracks attacks on internet-exposed PLCs at more than 30 Minnesota water and wastewater utilities. | MITRE, via SecurityWeek | Attributed |
| MITRE said the Minnesota attacks left operators locked out of their systems. | MITRE, via SecurityWeek | Attributed |
| MITRE said attribution for the Minnesota intrusions remains unconfirmed. | MITRE, via SecurityWeek | Attributed |
| MITRE said a second campaign documents an AI-assisted breach of Mexican government institutions that reached a municipal water utility. | MITRE, via SecurityWeek | Attributed |
| MITRE added 15 detection strategies and 38 analytics, including six Enterprise strategies and nine ICS strategies. | MITRE, via SecurityWeek | Attributed |
| MITRE said the new ICS analytics are designed to ignore routine engineering and maintenance work. | MITRE, via SecurityWeek | Attributed |
| MITRE added the Nimbus Manticore espionage group, which it describes as IRGC-associated and focused on aerospace, defense and telecoms organizations. | MITRE, via SecurityWeek | Attributed |
| MITRE’s Salt Typhoon entry now covers exploitation of network edge devices. | MITRE, via SecurityWeek | Attributed |
| MITRE said the APT38 entry reflects a shift from financial theft to software supply-chain attacks. | MITRE, via SecurityWeek | Attributed |
| MITRE added The Gentlemen, a group running a ransomware-as-a-service operation. | MITRE, via SecurityWeek | Attributed |
| MITRE’s Mobile domain again includes a technique for delivering malicious apps outside official stores. | MITRE, via SecurityWeek | Attributed |
| MITRE added NGate, malware that relays payment card data through a phone’s NFC and allows ATM cash withdrawals. | MITRE, via SecurityWeek | Attributed |
Related stories
Data LeaksETS breach exposed California student information over months
Agent SecurityCairn AI agents tried more than 1,200 websites
Vulns & PatchesSiemens confirms active exploitation of Software Center flaw