Case sysdig-jadepuffer-agentic-ransomwareAI-assisted malwareWorldwide
JADEPUFFER: LLM agent runs Langflow intrusion to database extortion end to end
Sysdig documented an LLM agent that exploited Langflow CVE-2025-3248, harvested keys, pivoted via a Nacos auth bypass, encrypted 1,342 config items with a key it never saved, dropped databases and left a ransom note.
HighAttack using AIStatus: UnresolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Jul 1, 2026
- Location
- Worldwide
- Target
- Unnamed organisation running Langflow, MySQL and Nacos
- Severity
- High
- Triggered by
- JADEPUFFER
- Actor type
- Unknown
- Reported loss
- None reported
- CVE
- CVE-2025-3248
What happened
Sysdig documented an LLM agent that exploited Langflow CVE-2025-3248, harvested keys, pivoted via a Nacos auth bypass, encrypted 1,342 config items with a key it never saved, dropped databases and left a ransom note.
Impact: 1,342 Nacos configuration items encrypted unrecoverably and several databases dropped; ransom amount not stated.
Who triggered it
Actor: JADEPUFFER
Attribution: Sysdig assesses an LLM agent drove the operation, citing self-narrating code and a 31-second failure fix; a human may have configured the agent. Operator unidentified.
Motive: Extortion
How it happened
Attack vector: Unauthenticated Langflow code execution, secret harvesting, default MinIO credentials, cron beacon, forged Nacos JWT and backdoor admin account
Root cause: Internet-facing Langflow with a known RCE and default credentials downstream
Timeline
- Langflow CVE-2025-3248 disclosed; fixed in 1.3.0
- Sysdig publishes JADEPUFFER analysis
Response
Sysdig published IOCs; patch Langflow to 1.3.0 or later.
Current status: Unresolved
Sources (open in a new tab)
- Sysdig sysdig.com
- Infosecurity Magazine infosecurity-magazine.com
- Outpost24 outpost24.com
Cite this case
JADEPUFFER: LLM agent runs Langflow intrusion to database extortion end to end. AI Threat Watch, case sysdig-jadepuffer-agentic-ransomware, Jul 1, 2026. https://aithreat.io/cases/sysdig-jadepuffer-agentic-ransomware/
Permanent link: https://aithreat.io/cases/sysdig-jadepuffer-agentic-ransomware/