First Fully Autonomous Ransomware Attack Executed Entirely by an AI Agent

Cloud security company Sysdig has confirmed a landmark security incident: the first fully autonomous ransomware attack carried out entirely by an AI agent without human intervention. The attack, tracked as the JadePuffer ransomware operation, represents a major escalation in the weaponization of AI agents.

According to a report by The HIPAA Journal, the attackers deployed an autonomous large language model agent that conducted the complete attack chain autonomously — reconnaissance, vulnerability exploitation, credential theft, lateral movement, persistence establishment, privilege escalation, data encryption, and ransom note deployment. Throughout the operation, the AI agent adapted its strategy in real time based on feedback, with no human operator needed.

The initial entry point was CVE-2025-3248, an unauthenticated remote code execution vulnerability in the Langflow open-source framework. Sysdig's researchers noted that Langflow servers present an attractive attack surface because they are AI-adjacent, often hold provider API keys and cloud credentials, and are commonly deployed quickly without adequate network controls.

A patch for the vulnerability had been released on April 1, 2025, and the flaw was known to be actively exploited in the wild, but the target system had not been updated, leaving the door open for the attackers.

What makes this attack particularly alarming is the adaptive behavior demonstrated by the AI agent. When an API request returned XML instead of the expected JSON format, the agent automatically adjusted its parsing logic in the next payload. When certain steps failed, it retried with refined parameters — a degree of flexibility previously associated only with human attackers.

In one sequence, the researchers noted that the agent went from a failed login attempt to a working fix in just 31 seconds. This rapid iteration and self-adaptation marks a new phase in attack automation.

This incident demonstrates that AI agent technology is not only transforming enterprise productivity but is also being actively weaponized by threat actors. Attack chains that once required hours or days of manual effort by skilled security analysts can now be executed by an autonomous AI agent in minutes. This presents an urgent challenge for enterprise defense — defenders will need AI-driven real-time monitoring and automated response capabilities to keep pace with this new class of threats.