JadePuffer

Reports per quarter

Techniques seen in the last two years

• T1005 1 report
• T1016 1 report
• T1021 1 report
• T1041 1 report
• T1046 1 report
• T1053.003 1 report
• T1057 1 report
• T1059.006 1 report
• T1070.004 1 report
• T1071.001 1 report

Counts come from technique IDs in the actor's report text.

CVEs named in reports

• CVE-2021-29441
• CVE-2025-3248 KEV ransomware
• CVE-2026-33017 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 25 September 2026

   Storm-3168: Agentic-driven cloud attacks using compromised service principals

   publisher's date Microsoft Security fromMS Security

   Detailsfor Storm-3168: Agentic-driven cloud attacks using compromised service principals

2. 28 July 2026

   New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

3. 28 July 2026

   JADEPUFFER: The Dawn of Agentic Ransomware Operations

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor JADEPUFFER: The Dawn of Agentic Ransomware Operations

4. 28 July 2026

   JadePuffer Becomes the First Ransomware Campaign to Let an AI Agent Run the Entire Attack | SecureReading JadePuffer AI Ransomware Uses Autonomous LLM Agent to Automate Entire Cyberattack

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor JadePuffer Becomes the First Ransomware Campaign to Let an AI Agent Run the Entire Attack | SecureReading JadePuffer AI Ransomware Uses Autonomous LLM Agent to Automate Entire Cyberattack

5. 28 July 2026

   Threat Intelligence Report: JADEPUFFER Agentic Ransomware and Automated Extortion

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Threat Intelligence Report: JADEPUFFER Agentic Ransomware and Automated Extortion

6. 28 July 2026

   AI Security Incident Case: JadePuffer Ransomware Leverages AI Agent to Automate Attacks

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor AI Security Incident Case: JadePuffer Ransomware Leverages AI Agent to Automate Attacks

Newest first. Details opens the report in Explore.