Topic starter
18/08/2026 2:39 pm
TL;DR: Sysdig says the JadePuffer campaign is the first fully agentic ransomware attack, with an LLM-driven agent exploiting CVE-2025-3248 and retrying failed steps to improve success, while Expel notes a human operator still directs the activity. The operational lesson is that agentic automation changes attack speed and persistence, but accountability and basic controls still matter most, per Expel.
Editorial analysis by NHI Mgmt Group, based on content published by Expel: “The “first” fully agentic ransomware is here, but we aren’t panicking (yet): Meet JadePuffer”.
By the numbers:
- The article says the campaign exploited CVE-2025-3248 and then retried failed steps to improve success.
Key questions
Q: What fails when ransomware operators add an LLM to their attack workflow?
A: The failure is usually not the model itself but the speed and adaptability it adds to an already valid intrusion path.
Q: Why do agentic ransomware campaigns still depend on human accountability?
A: Because the human operator chooses the target, initiates the workflow, and decides how far the attack should go.
Q: What are the signs that agentic attack tooling is amplifying a ransomware intrusion?
A: Look for short-interval retries, repeated task failures followed by immediate alternate attempts, and a faster transition from initial access to encryption activity than your environment usually sees.
Practitioner guidance
- Harden known exploit entry points Patch and isolate the software paths that would let an adversary reach a ransomware foothold, with special attention to externally exposed services and proof-of-concept exploits like CVE-2025-3248.
- Detect repeated failed attack steps Tune detection for rapid retry patterns, repeated command failures, and short-interval replays that suggest an agent is adapting instead of a human manually troubleshooting.
- Separate operator accountability from AI tooling Keep incident analysis focused on who controlled the campaign, what access they used, and which steps were human-directed versus machine-executed.
Bottom line: JadePuffer shows that agentic ransomware can speed up execution, but it still depends on a human operator and ordinary exploit conditions.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
18/08/2026 3:23 pm
Agentic ransomware is an execution model, not a replacement for criminal tradecraft: the critical change is that the attack can be iterated by software while the operator still directs the campaign. That means defenders should not over-index on whether the attack is 'fully autonomous'. They should ask which parts of the intrusion chain are now machine-accelerated and which remain human-controlled, because accountability and containment still sit with the threat actor.
A few things that frame the scale:
- AI-related credential leaks surged 81.5% year-over-year in 2025, with the surrounding AI infrastructure leaking 5x faster than core LLM providers, according to the State of Secrets Sprawl 2026.
A question worth separating out:
Q: How should security teams compare agentic ransomware with traditional ransomware operations?
A: Traditional ransomware is often a scripted or manually driven intrusion chain, while agentic ransomware can modify its own execution sequence during the attack. The distinction matters operationally, but both still depend on access, privilege, and a successful extortion path. Defenders should not treat agentic behaviour as a new category of control failure.
👉 Read our full editorial: JadePuffer shows how agentic ransomware still depends on human control