Threat actor
JADEPUFFER
Tracked by CyberSIXT since 2 Jul
- Articlesall time
- 11
- Articleslast 30 days
- 4
- CVEs exploitedattributed · all time
- 1
- Research reportsall time
- 8
11 articles from 1 outlet since 2 Jul; the latest 26 days ago.
- Article
- First report
- Research report
Show as table
Names and sources
- JadePuffer
- CyberSIXT coverage, Malpedia, MISP Galaxy
- Storm-3168
- Malpedia, MISP Galaxy
CVEs exploited
1 CVE an article attributes to JADEPUFFERCVE-2025-3248Langflow Missing Authentication Vulnerability · attributed in coverage, 3 Jul · Source articleCVSS9.8CriticalExploited99.9%EPSS0articles
Vendors targeted
- Azure Ransomware Attack Wiped Cloud Tenants and Stole Storage KeysSecurityOnline
- Microsoft Says JadePuffer Tried to Destroy an Azure TenantDark Reading
- Storm-3168 Used Stolen Azure Identities to Delete Cloud DataSecurity Affairs
- JADEPUFFER Attackers Exploit Azure Identities to Delete Cloud ResourcesThe Hacker News
- Microsoft Links Azure Destruction Spree to Ransomware Actor Storm-3168Microsoft
- ENCFORGE Ransomware Hunts AI Models Through Langflow RCEThe Hacker News
- JadePuffer's ENCFORGE ransomware erases AI models via LangflowInfosecurity
- Agentic ransomware JadePuffer driven by LLM hits Langflow flawInfosecurity
- JADEPUFFER AI ransomware exploits Langflow flaw CVE-2025-3248Security Affairs
- Agentic AI Used to Conduct Ransomware Attack via LangflowSecurityWeek
- AI Agent Exploits Langflow RCE to Trigger RansomwareThe Hacker News · first in our coverage
Research reports
- Storm-3168: Agentic-driven cloud attacks using compromised service principalsMicrosoft · 6 Oct
- JADEPUFFER: Agentic ransomware for automated database extortionSysdig · 6 Oct
- JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI modelsSysdig · 6 Oct
- JADEPUFFER: The Dawn of Agentic Ransomware OperationsMedium · 28 Jul
- AI Security Incident Case: JadePuffer Ransomware Leverages AI Agent to Automate Attacksnsfocusglobal.com · 28 Jul
- JadePuffer Becomes the First Ransomware Campaign to Let an AI Agent Run the Entire Attack | SecureReading JadePuffer AI Ransomware Uses Autonomous LLM Agent to Automate Entire Cyberattacksecurereading.com · 28 Jul
- Threat Intelligence Report: JADEPUFFER Agentic Ransomware and Automated Extortionkrypt3ia.wordpress.com · 28 Jul
- New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News · 28 Jul