Overview
JADEPUFFER is a threat operator documented by Sysdig TRT (July 2026), assessed as the first end-to-end agentic ransomware campaign — extortion driven by an LLM agent without human at keyboard. Classified as an agentic threat actor (ATA).
Attack Chain
- Initial access: CVE-2025-3248 on internet-exposed langflow (unauthenticated RCE)
- Recon/credential harvest: Langflow DB dump, env vars, cloud/LLM API keys, MinIO enumeration
- Persistence: Cron beacon every 30 minutes to C2 (45.131.66[.]106)
- Lateral pivot: Production MySQL + nacos server using stolen credentials
- Encryption: 1,342 Nacos config items via AES_ENCRYPT; keys not stored — unrecoverable data
- Adaptation: Fixed failed admin login in 31 seconds; 600+ self-narrating LLM-style payload comments
"First agentic ransomware" is Sysdig's assessment, not industry consensus. Novelty is autonomous chaining of known CVEs, not zero-days.