Artificial Intelligence
Subtechnique · ATTACK:enterprise:T1588.007
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:T1588.007",
"title": "Artificial Intelligence",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1588/007",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--0cc222f5-c3ff-48e6-9f52-3314baf9d37e",
"external_id": "T1588.007",
"domain": "enterprise",
"created": "2024-03-11T13:37:31.836Z",
"modified": "2026-09-16T19:44:37.015Z",
"version": "1.2",
"aliases": [
],
"tactics": [
"resource-development"
],
"source_references": [
{
"source_name": "WSJ-Vishing-AI24",
"url": "https://www.wsj.com/articles/fraudsters-use-ai-to-mimic-ceos-voice-in-unusual-cybercrime-case-11567157402"
},
{
"source_name": "Google-Vishing24",
"url": "https://cloud.google.com/blog/topics/threat-intelligence/ai-powered-voice-spoofing-vishing-attacks"
},
{
"source_name": "IC3-AI24",
"url": "https://www.ic3.gov/PSA/2024/PSA241203"
},
{
"source_name": "MSFT-AI",
"url": "https://www.microsoft.com/en-us/security/blog/2024/02/14/staying-ahead-of-threat-actors-in-the-age-of-ai/"
},
{
"source_name": "OpenAI-CTI",
"url": "https://openai.com/index/disrupting-malicious-uses-of-ai-by-state-affiliated-threat-actors/"
}
]
}Explicit source assertions (10)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1056 → mitigates → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0acf511c-5e8d-42af-a837-83e8bb0d65e9
ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--33742c76-107b-455f-8462-40717e9f114b
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:T1588.007 → subtechnique-of → ATTACK:enterprise:T1588
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3578dfa3-12cf-4788-aeba-e3478981177b
ATTACK:enterprise:G1059 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--962bca25-bd4b-4b03-8614-47df7d268192
CheckPoint_NimbusManticore_May2026ATTACK:enterprise:G1052 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac4b42d5-f234-4258-8fa3-d8dc67c16b75
Recorded Future Contagious Inteview BeaverTail InvisibleFerret OtterCookie February 2025ATTACK:enterprise:C0064 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bac08bef-5577-40dc-ac8d-95ea81b4f6bb
AI-Mexico-Govt-Breach · AI-Mexico-Govt-CompromiseATTACK:enterprise:G1057 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c53d31c2-d849-41cc-b505-fb8f21447dc3
ElecticIQ Buyukkaya_ShinyHunters_Sept2025ATTACK:enterprise:S9039 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c9143aee-2567-404c-b3e5-b92ed90d10fb
CERT PolskaATTACK:enterprise:C0063 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e44edad2-1c0f-4329-a9d0-a9f24e6f078a
CERT PolskaATTACK:enterprise:G0007 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f204789f-82e9-48ff-9bde-b31da1d91edc
Nov AI Threat Tracker