JadePuffer deploys ENCFORGE ransomware targeting AI infrastructure
This digest was compiled by AI from multiple sources — links to the originals are below.
Sysdig researchers reported that the threat actor JadePuffer returned to a previously compromised Langflow instance and deployed ENCFORGE, a new ransomware targeting AI and ML infrastructure. The attacker used an AI agent to extract cloud credentials and deploy the ransomware, succeeding on the second attempt after the first failed.
The Attack Chain
Sysdig researchers first documented JadePuffer earlier this month exploiting CVE-2025-3248 in an internet-facing Langflow instance. The attacker used an LLM-powered AI agent to pivot to a production server, encrypting a MySQL database and Alibaba Nacos configuration service. On Monday, Michael Clark, director of threat research at Sysdig, reported that the same actor returned to the same Langflow instance and deployed ENCFORGE, a Go-based ransomware targeting approximately 180 file extensions related to AI/ML stacks.
ENCFORGE Capabilities
ENCFORGE targets model checkpoints, vector databases, training datasets, and embedding indices in nearly every current format, according to Sysdig. The researchers observed the AI agent extracting cloud provider keys, database connection strings, and API tokens, then reusing them to access internal database and cache services. The ransomware deployment succeeded on the second attempt after the agent quickly devised an alternative approach when the first failed.
Expanded Threat Model
Clark noted that Langflow deployments sit adjacent to the infrastructure ENCFORGE is designed to destroy, including model weights, vector stores, and training pipelines. "For organizations building or operating AI infrastructure, the threat model has expanded," he said, adding that encrypted production models often cannot be restored from backups, unlike business files.
What's Next
Sysdig is continuing to monitor JadePuffer's activities and has shared indicators of compromise. It remains unclear whether the attacker will target additional Langflow instances or develop further variants of ENCFORGE.
4 sources
JadePuffer deploys ENCFORGE ransomware targeting AI infrastructure
