Security researchers at Sysdig have documented what they describe as one of the first ransomware attacks carried out almost entirely by an autonomous AI agent, nicknamed “JadePuffer.” Rather than a human hacker manually working through each step, the AI agent scanned for weaknesses, broke in, stole credentials, and encrypted data largely on its own.
The attack started with a known, unpatched vulnerability in a piece of workflow software called Langflow (tracked as CVE-2025-3248). From there, the AI agent hunted down API keys, cloud credentials, and database passwords sitting on the compromised system, let itself back in via a scheduled task, then used an exposed database with a root-level login to reach further into the network. It ultimately encrypted more than 1,300 configuration files and left behind a ransom note with a Bitcoin address and contact email.
A Sysdig researcher noted the AI’s activity included “self-narrating” logs showing it reasoning through each step and adapting when something didn’t work the first time. As he put it, the skill and effort needed to run a ransomware attack has dropped to whatever it costs to rent an AI agent for a few hours.
For a small or medium business, the lesson isn’t about AI being scary in the abstract – it’s that the entry points these attacks use are ordinary and preventable:
- Patch promptly. The attack succeeded through a vulnerability that already had a fix available. Delayed patching is now a bigger gamble than ever.
- Lock down exposed logins. Databases and admin consoles reachable from the internet with weak or root-level credentials are exactly what these tools look for first.
- Limit what one compromised account can reach. Segmenting systems and rotating credentials regularly slows an attacker down, human or AI, and buys time to respond.
Attacks like this can now run faster and cheaper than ever, with less need for a skilled human operator behind the keyboard.
Worried this affects your business? Get a free 15-minute IT check – call Trends IT on 0485 011 911 or visit /contact/.