CyberAv3ngers (Iran IRGC) — used ChatGPT to research ICS attacks on water utilities
Date: 2024-10
Affected: OpenAI ChatGPT; targets — water, energy, ICS
Attack vector: tool-abuse
Category: threat-report
Severity: Critical

Iranian IRGC-linked CyberAv3ngers used ChatGPT to research default credentials for Tridium Niagara and Hirschmann industrial control devices, study programmable logic controllers, debug bash/Python scripts and plan ICS attacks against water and energy facilities in the US, Israel and Ireland.


Mitigations:

Architectural layers (MAESTRO):