JADEPUFFER: The Dawn of Agentic Ransomware Operations

4 min read

Jul 4, 2026

--

Press enter or click to view image in full size

Introduction

A landmark report from the Sysdig Threat Research Team has documented the first known case of a truly “agentic” ransomware campaign, orchestrated by a threat actor dubbed JADEPUFFER. Unlike traditional attacks where a human sits behind a terminal, JADEPUFFER is an agentic threat actor. In this paradigm, the entire kill-chain — from initial entry to lateral movement and final database destruction — is executed by an AI agent rather than a human-controlled toolkit.

The im…