JADEPUFFER Agentic Ransomware Uses LLM to Automate Database Extortion

The first instance of agentic ransomware: JADEPUFFER, an LLM-driven extortion operation that automated an end-to-end database-crippling campaign. The actor gained execution on an internet-facing Langflow instance via CVE-2025-3248, used the AI-host environment to harvest cloud and API credentials, and pivoted into a production MySQL/Nacos deployment to carry out a destructive, database-focused extortion playbook without a […]

The post JADEPUFFER Agentic Ransomware Uses LLM to Automate Database Extortion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.