JADEPUFFER: An End-to-End Agentic-Led Ransomware Attack

JADEPUFFER: An End-to-End Agentic-Led Ransomware Attack

August 26, 2026 · 31 min · Season 4 · Episode 76

About this episode

This episode discusses JADEPUFFER, a ransomware attack conducted by an LLM, and explores the implications of AI in cyber threats.

In this episode of the Microsoft Threat Intelligence Podcast, we are joined by Sysdig’s Michael Clark and Crystal Morin to discuss JADEPUFFER, one of the first documented cases of an LLM conducting an end-to-end ransomware operation. They break down how the agent, and the direction of a threat actor was identified, how AI is lowering the barrier to entry for ransomware, and why speed and adaptability are changing the threat landscape. Plus, they explore what organizations can do to defend against AI-powered attacks, from basic security hygiene and exposure management to better understanding their growing AI infrastructure.    In this episode you’ll learn:       How Jade Puffer used an LLM to conduct a ransomware attack  Why agentic AI can make cyberattacks faster and more adaptable  How organizations can better protect their growing AI infrastructure  Some questions we ask:      How did you determine an LLM was conducting the attack?  What basic security practices are most important against these attacks?  Does AI allow less-sophisticated threat actors to carry out more advanced…

More episodes of Microsoft Threat Intelligence Podcast

Explore listener stats, chart rankings, contacts and more on the Microsoft Threat Intelligence Podcast podcast page.