File · JadePuffer · Unknown · misp-galaxy · refreshed 2026-10-06 · on the wire
JadePuffer
- Storm-3168
- JADEPUFFER
sigil · no ATT&CK coverage stated
Last 30 days
last seen 19 d agoWhat changed
ledger · newest first- —todaynew CVE2 new CVEs: CVE-2021-29441, CVE-2025-3248
- —10 d agonew alias2 new aliases: JADEPUFFER, Storm-3168
- —20 d agoresurfacedback on the wire — nothing in the previous 30 days
Analyst brief
misp-galaxyJADEPUFFER is an agentic threat actor that executed a fully autonomous ransomware operation, leveraging a Large Language Model to automate the entire attack chain from initial access to data destruction. It exploited CVE-2025-3248 against an exposed Langflow instance for initial access, then compromised MinIO using default credentials and manipulated MySQL for privilege escalation. The operation culminated in the encryption of over 1,300 configuration records in Nacos, with the encryption key lost, rendering the data unrecoverable. JADEPUFFER exemplifies a shift towards machine-speed extortion, where traditional security models are outpaced by automated threats.
CVEs JadePuffer is cited as exploiting
1 on CISA KEV- CVE-2025-3248KEV2026-10-17
“documented JADEPUFFER: an agentic threat actor (ATA) that exploited Langflow through CVE-2025-3248.”
cited as exploiting · source: sysdig.com ↗ · 2026-10-17
“After gaining initial access by exploiting a Langflow vulnerability (CVE-2025-3248), the JadePuffer ransomware leveraged a Large Language Model (LLM) agent to automatically execute the entire attack chain.”
cited as exploiting · source: nsfocusglobal.com ↗ · 2026-10-17
“This operator, which we have dubbed JADEPUFFER, gained initial access to an internet-facing Langflow instance through CVE-2025-3248 and ran an adaptive and fully automated campaign”
cited as exploiting · source: sysdig.com ↗ · 2026-10-17
“JADEPUFFER, a separate actor in the same cluster, exploited an earlier Langflow vulnerability ( CVE-2025-3248 ) in its database extortion campaign.”
cited as exploiting · source: tenable.com ↗ · 2026-10-17
“The attack began by exploiting CVE-2025-3248 , a remote code execution vulnerability affecting Langflow, an open-source platform widely used for developing LLM-powered applications.”
cited as exploiting · named nearby · source: securereading.com ↗ · 2026-10-17
- CVE-2021-294412026-10-17
“Using privileged credentials, whose source remains unclear, it launched additional exploitation attempts, including abuse of CVE-2021-29441 , an authentication bypass vulnerability capable of creating unauthorized administrator accounts.”
cited as exploiting · named nearby · source: securereading.com ↗ · 2026-10-17
“Captured payloads show the LLM attacking the Nacos service through multiple vectors simultaneously. That includes exploiting the auth-bypass family (CVE-2021-29441)”
cited as exploiting · named nearby · source: sysdig.com ↗ · 2026-10-17
Each line is what a source says, quoted, with the source linked under it. A citation is a source's claim, not our confirmation: read the source before you act on it.
On the wire
1 dispatch · newest firstTake it with you
keyless · no signupReferences
8 sources- 1.thehackernews.com/2026/07/new-encforge-ransomware-targets-ai.html
- 2.krypt3ia.wordpress.com/2026/07/13/threat-intelligence-report-jadepuffer-agent…
- 3.nsfocusglobal.com/ai-security-incident-jadepuffer-ransomware-leverages-a…
- 4.securereading.com/jadepuffer-ai-ransomware-autonomous-llm-attack
- 5.socfortress.medium.com/jadepuffer-the-dawn-of-agentic-ransomware-operations-0…
- 6.microsoft.com/en-us/security/blog/2026/09/25/storm-3168-agentic-driv…
- 7.sysdig.com/blog/jadepuffer-evolves-the-agentic-threat-actor-deplo…
- 8.sysdig.com/blog/jadepuffer-agentic-ransomware-for-automated-datab…
Track JadePuffer on the wire.
This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.