Attackers feed public org charts and news into an AI system to build ranked lists of city staff titles for spear-phishing. Which AI-enhanced attack activity is this?

AI-enabled reconnaissance accelerates target profiling by ingesting public org charts, news, and similar open data to produce ranked lists of city staff titles useful for spear-phishing and priority compromise planning. The activity compresses what used to take manual OSINT hours into automated prioritization of municipal personnel who appear high-value by role, publicity, or access adjacency. AI-assisted weaponization that creates tailored malware for city workstations involves building malicious payloads, not ingesting public data to rank personnel titles; the scenario stops at target profiling, so it is not weaponization. AI-automated delivery that sends personalized phishing emails to selected staff is the delivery stage, which happens after profiling; the described activity only builds ranked target lists from open data, so it is not yet delivery. AI-driven exploitation that bypasses authentication on exposed municipal web portals is an exploitation technique against systems, not the automated profiling of municipal personnel from public records. Exam caveat: AI chewing public personnel data into ranked phishing lists is recon acceleration—do not confuse it with AI-assisted malware creation, AI-automated phishing delivery, or AI-driven authentication bypass. Operational check: minimize unnecessarily detailed public org charts, warn high-profile roles about tailored lures, tighten external directory exposure, and ensure awareness training covers AI-assisted targeting of municipal staff—not only executives.