US agencies warn of AI-powered attacks on Siemens industrial controllers

Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series programmable logic controllers (PLCs) used across water, energy, manufacturing, and other critical infrastructure sectors, according to US federal agencies.

PLCs are the small industrial computers that open valves, run pumps, and control machinery in factories, water plants, and power stations.

The NSA, CISA, FBI, Department of Energy (DOE), and Environmental Protection Agency (EPA) issued the joint advisory Wednesday, warning that “this is not a theoretical risk—it is an active threat.”

The sectors named as most targeted are critical manufacturing, energy, water and wastewater, chemical, food and agriculture, and commercial facilities.

How the attacks work

“Threat actors are leveraging open source industrial automation libraries—specifically snap7.dll/python-snap7—combined with AI-assisted scripting to create custom tools that mimic legitimate OT monitoring solutions. These tools provide read/write access to Siemens S7 Series PLC memory, configuration data, and ladder logic programs via the S7comm protocol,” reads the advisory.

“Using AI to generate exploitation scripts represents an evolution in threat actor capabilities, dramatically reducing the technical expertise and time required to develop working ICS exploitation scripts and malicious tools. In addition, AI enables adversaries to rapidly leverage additional attack vectors and adapt to defensive measures,” they added.

The advisory notes that attackers are scanning the internet with tools like Censys and ZoomEye to find exposed or poorly segmented Siemens S7 devices, then taking advantage of default or weakly configured credentials on those devices to get in.

Affected product lines are: S7-200 (all CPU variants), S7-300 (including the 314, 315, and 317 models), S7-400 (all variants), S7-1200 (CPU 1211C through 1217C), and S7-1500, including the F-series safety controllers.

The agencies assess the activity as persistent reconnaissance and capability development.

“To prepare for operational effects, actors are leveraging read access to understand target environments, enabling preparation and positioning for future write operations to cause disruption or other operational impacts,” they stated.

Recommended mitigations

Organizations are urged to inventory every Siemens S7 device on the network, apply security patches, keep PLCs off the internet, strengthen access controls, monitor for unauthorized activity, harden PLC services and protocols, and hunt for signs of compromise.

Organizations that rely on system integrators or third-party service providers should share the advisory with those parties directly, since an asset owner may not know their PLCs are reachable from the internet in the first place.

Iran-linked hackers keep targeting industrial systems

The advisory doesn’t attribute the activity to any specific group or country, referring throughout only to “threat actors.” Still, the pattern resembles an earlier warning.

In April, CISA and partner agencies warned that Iranian-affiliated actors were exploiting internet-connected Rockwell Automation PLCs. A July update expanded the scope of observed targeting to include Schneider Electric and Siemens devices.

Days after that update, a coordinated cyberattack hit OT systems at more than 30 community water utilities across Minnesota on July 26 and 27. Security researchers believe the Iran-linked group CyberAv3ngers is behind the intrusions, based on timing and targeting patterns.