Claude AI Abused In Attacks On Water and Drainage Utilities

In late 2025 an unknown adversary leveraged commercial AI (Anthropic Claude and OpenAI GPT) to rapidly create a large, custom 17,000-line Python intrusion framework and enumerate a municipal water utility's network in Monterrey, Mexico, identifying a vNode SCADA gateway and attempting a targeted password-spraying attack against OT access; the automated attack failed and the core control systems were not breached.