Expired50% confidenceFactExact time
JadePuffer ultimately encrypted 1,342 service configuration files, deleted the original files, and left a table named README_RANSOM in the database with a Bitcoin payment address.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/14/2026
First Seen
Valid until: 10/12/2026(expired)
Sources
JadePuffer全自动AI勒索攻击实战复盘：智能体武器化时代来临
Related Claims
UnverifiedThe entry point of the JadePuffer attack is an unauthorized code execution vulnerability in Langflow, which allows arbitrary code to be executed on the target server without authentication.66% similarUnverifiedJadePuffer的攻击入口是Langflow的一个未授权代码执行漏洞，编号CVE-2025-3248，CVSS评分高达9.862% similarUnverifiedRansomware is a type of malware that encrypts victims' files and demands a ransom in exchange for the decryption key.62% similarUnverified2014年的OpenSSL Heartbleed漏洞因边界检查缺失导致内存越界读取，攻击者可借此窃取服务器内存中的私钥和用户数据61% similarVerifiedIn the 2018 event-stream incident, an attacker took over the maintenance rights of an npm package and implanted malicious code to steal Bitcoin wallet private keys; the package had over 2 million weekly downloads.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/509483API
curl https://kongchang.com/api/v1/knowledge/claims/509483MCP
get_claim(id=509483)