CTI · reviewed · 2026-09-29

JadePuffer Agentic Ransomware — First Documented AI-Agent-Driven Extortion Operation

Full story & timeline

Actors

JadePuffer

Malware / tools

EncForge

Campaigns

—

CVEs

CVE-2025-3248CVE-2021-29441

Victim sectors

technologyAI

Geography

—

MITRE ATT&CK

T1190 Exploit Public-Facing Application Initial Access
T1053 Scheduled Task/Job Execution
T1136 Create Account Persistence
T1530 Data from Cloud Storage Collection
T1486 Data Encrypted for Impact Impact
T1059 Command and Scripting Interpreter Execution

Indicators

Observables tied to this case, from the curated feed. raw sidecar

45.131.66.106 ipv4 · expired
64.20.53.230 ipv4 · expired

Detections

Detection content derived from this case analysis. Status: experimental — not validated against live telemetry.

Sigma raw

title: JadePuffer Agentic Ransomware Cron Beacon to Fixed C2 Endpoint
id: 51d8f00c-2dca-4dcc-90b3-766e9a5193b8
status: experimental
description: >
    Detects network connections to 45.131.66.106 TCP/4444, the fixed
    command-and-control endpoint of the JadePuffer agentic ransomware
    operation (Sysdig, 2026): the intruder persisted with a cron job
    beaconing to this endpoint every 30 minutes after exploiting Langflow
    CVE-2025-3248, then encrypted 1,342 Alibaba Nacos configuration items.
references:
    - https://www.sysdig.com/blog/jadepuffer-agentic-ransomware-for-automated-database-extortion
    - https://www.bleepingcomputer.com/news/security/jadepuffer-ransomware-used-ai-agent-to-automate-entire-attack/
author: Tia N. List
date: 2026/09/29
tags:
    - attack.t1053
logsource:
    category: network_connection
detection:
    selection:
        DestinationIp: 45.131.66.106
        DestinationPort: 4444
    condition: selection
falsepositives:
    - Unlikely; any connection to this fixed attacker endpoint should be
      investigated, but re-check for spoofed or redirected telemetry first
level: high