AI Threats in Construction: What Your Team Should Really Be Worried AboutBy Preston Borchelt

Let’s be real, AI is the new buzzword in every boardroom and jobsite trailer these days. And if you’re anything like me, you’ve felt both excited and uneasy about it. It’s not just the tools we can use to speed up scheduling or sift through safety reports, it’s also the reality that cybercriminals are using AI too.

For those of us in construction IT, especially where projects move fast and downtime isn’t an option, the question becomes: what AI threats are real, and what’s just noise?

Here’s what I’ve been watching, and what I think every construction firm should have on their radar this quarter.

1. Deepfakes in the Boardroom? Believe It.

Imagine this: Your project engineer joins a Zoom call, and the “CFO” asks her to approve a wire transfer. The voice sounds right. The face matches. But it’s not really the CFO, it’s a deepfake. And the money? Gone.

Sounds like science fiction, right? Unfortunately, it’s already happening. Threat actors are using AI-generated video and audio to impersonate executives. One case involved a company unknowingly downloading a malicious Zoom extension after a deepfake “boss” told them to.

In construction, where fast decisions are often made remotely, that’s a scary thought. So, what can we do?

Here’s what I tell my clients:

  • Confirm sensitive requests with a second channel (phone call, text, in-person).
  • Train teams to watch for awkward facial movements, odd lighting, or long pauses—hallmarks of deepfakes.
  • Invest in tools that authenticate meeting attendees and flag suspicious behavior.

This isn’t just IT, it’s business continuity.

2. Phishing Emails Got Smarter (But So Can We)

Remember the days when you could spot a phishing email by its terrible grammar or weird formatting? Well, those days are over.

AI can now write emails that sound polished, personal, and urgent. It can translate messages into multiple languages, spoof familiar brands, and even reference project-specific details scraped from public records or LinkedIn.

The goal? Trick someone on your team into clicking a link, sharing credentials, or installing malware.

But here’s the good news: MFA (multi-factor authentication) still stops most of these attacks in their tracks. So does training your crew to slow down when something feels off.

If you’ve ever had that sinking feeling that someone almost clicked on the wrong thing, you’re not alone. I’ve worked with construction firms where one training session dropped phishing click rates by 80%. That’s peace of mind worth having.

3. Fake AI Tools Are the New Trojan Horse

Here’s something I’ve seen lately: someone on the estimating team finds a “free AI tool” to help analyze subcontractor bids faster. Looks legit. But when they install it?

  • Keyloggers. Backdoors.

AI hype is the new lure for cybercriminals, and they’re using it to spread malware dressed up as productivity tools.

One TikTok video even promoted a way to bypass ChatGPT licensing with a PowerShell script. Turns out, it was a full-blown malware campaign.

Before anyone downloads a “cool new AI thing,” ask your IT team or our team to vet it. What looks like a shortcut today can become a six-figure breach tomorrow.

Construction Doesn’t Need More Fear, It Needs Better Filters

I know you’re not afraid of hard problems. You manage tech across multiple job sites, legacy systems, and crews who just want their iPads to connect reliably. What keeps you up at night isn’t some abstract AI threat, it’s knowing one click could bring operations to a standstill.

You don’t need hype. You need a partner who gets construction, gets cybersecurity, and knows how to translate emerging tech into practical, scalable solutions.

Let’s Make AI Work For You, Not Against You

If you’re feeling the pressure to move fast but protect everything at the same time, I’ve been there too. You don’t have to fight off these AI threats alone.

Let’s sit down (virtually or over coffee) and build a smart, construction-specific strategy to keep your people, your data, and your projects safe.

Schedule your free discovery call here

This isn’t just tech. It’s trust. And I’m here to help you protect both.

Preston Borchelt, President/CEO
Turning tech talk into real-world relief for construction leaders