{"id":2020,"date":"2026-07-06T17:07:25","date_gmt":"2026-07-06T17:07:25","guid":{"rendered":"https:\/\/americanhomejournals.com\/?p=2020"},"modified":"2026-07-06T17:07:25","modified_gmt":"2026-07-06T17:07:25","slug":"cybersecurity-firm-says-it-found-the-first-documented-case-of-ai-agentic-ransomware","status":"publish","type":"post","link":"https:\/\/americanhomejournals.com\/?p=2020","title":{"rendered":"Cybersecurity firm says it found ‘the first documented case’ of AI agentic ransomware"},"content":{"rendered":"
\n

Researchers at Sysdig, a cybersecurity firm, say they found a warning sign of where agentic AI is headed.<\/p>\n

Read more A new Kentucky AI data center will power Anthropic as part of a 20-year deal<\/a><\/p>\n

The Sysdig Threat Research Team believes it has found the first documented evidence of agentic ransomware, where a large language model orchestrated a complex attack. The team called the attack “Jade Puffer.”<\/p>\n

“JadePuffer is a warning sign,” Michael Clark, Sysdig’s director of threat research, wrote in a report. “It’s a marker of where extortion tradecraft is heading.”<\/p>\n

Clark wrote that Jade Puffer didn’t use “novel or sophisticated techniques,” but what was notable was how the AI model organized and executed the attack, illustrating that the barrier to entry for future ransomware attacks is now significantly lower.<\/p>\n

“The skill floor for running ransomware has dropped to whatever it costs to run an agent, and if that agent is running on stolen credentials through LLMjacking, the cost to an attacker is close to zero,” he wrote.<\/p>\n

The attack itself was targeted, as one would expect for a ransomware attack. Clark wrote that the LLM swept the server for logins to AI APIs, cloud credentials, cryptocurrency wallets, and database credentials.<\/p>\n

The AI even generated the ransom note, Clark wrote, by “creating an extortion table (README_RANSOM) containing the demand, a Bitcoin payment address, and a Proton Mail contact.”<\/p>\n

Sysdig said it was able to attribute elements of the attack to an AI model based on specific behaviors, including traces of code left by the attack on the targeted server that show telltale signs of AI generation.<\/p>\n

“The decoded payloads are saturated with natural-language commentary explaining why each action is taken,” Clark wrote.<\/p>\n

Read more Stockpicker Dan Sundheim had a monster June. Here\u2019s how D1 and other Tiger Cubs did.<\/a><\/p>\n

Geoff McDonald, a data scientist and cybersecurity researcher at Microsoft, said AI could unleash a wave of similar attacks.<\/p>\n

“Ransomware (and destructive) attacks can now scale bounded primarily by attacker budget – instead of being bounded by their human ability to operate campaigns themselves,” McDonald, principal research manager on Microsoft’s Defender for Endpoint team, wrote on LinkedIn. “There is now little stopping threat actors from operating thousands or tens of thousands of simultaneous campaigns.”<\/p>\n

One cybersecurity engineer said one of the most striking aspects of Jade Puffer was how the AI model adapted its operation in real time, including fixing an error in just over half a minute.<\/p>\n

“It read the error, fixed its own code and carried on. Took 31 seconds,” Oluwatobi Mustapha, a cybersecurity engineer, wrote on X. “I’ve spent longer than that staring at a typo.”<\/p>\n

AI was already sparking a cybersecurity moment before Sysdig uncovered evidence of Jade Puffer.<\/p>\n

Anthropic and OpenAI have both recently released advanced AI models that they have limited access to based on the models’ advanced cybersecurity capabilities. The Trump administration went so far as to impose export controls on Anthropic due to concerns about the firm’s Claude Mythos 5 and Fable 5 models.<\/p>\n

McDonald said the world is not ready for what’s coming.<\/p>\n

“This is a transformative moment in cybersecurity that in my opinion the industry and world is not ready for, and I believe will have great negative outcomes as it accelerates over these next few months,” he wrote.<\/p>\n

Read more The robots have made it to the World Cup<\/a><\/p>\n<\/section>\n","protected":false},"excerpt":{"rendered":"

Researchers at Sysdig say they found “a warning sign” of where ransomware attacks are heading.<\/p>\n","protected":false},"author":1,"featured_media":2019,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-2020","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai"],"yoast_head":"\nCybersecurity firm says it found 'the first documented case' of AI agentic ransomware - American home journals<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/americanhomejournals.com\/?p=2020\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cybersecurity firm says it found 'the first documented case' of AI agentic ransomware - American home journals\" \/>\n<meta property=\"og:description\" content=\"Researchers at Sysdig say they found "a warning sign" of where ransomware attacks are heading.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/americanhomejournals.com\/?p=2020\" \/>\n<meta property=\"og:site_name\" content=\"American home journals\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-06T17:07:25+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/#\\\/schema\\\/person\\\/a3bb30439d8074c26cddd2e4af7af957\"},\"headline\":\"Cybersecurity firm says it found ‘the first documented case’ of AI agentic ransomware\",\"datePublished\":\"2026-07-06T17:07:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020\"},\"wordCount\":579,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/americanhomejournals.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/1d2577ffa3eda5e662385e0ec1b1fa9c.webp\",\"articleSection\":[\"AI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020\",\"url\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020\",\"name\":\"Cybersecurity firm says it found 'the first documented case' of AI agentic ransomware - American home journals\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/americanhomejournals.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/1d2577ffa3eda5e662385e0ec1b1fa9c.webp\",\"datePublished\":\"2026-07-06T17:07:25+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/#\\\/schema\\\/person\\\/a3bb30439d8074c26cddd2e4af7af957\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020#primaryimage\",\"url\":\"https:\\\/\\\/americanhomejournals.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/1d2577ffa3eda5e662385e0ec1b1fa9c.webp\",\"contentUrl\":\"https:\\\/\\\/americanhomejournals.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/1d2577ffa3eda5e662385e0ec1b1fa9c.webp\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/?p=2020#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/americanhomejournals.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cybersecurity firm says it found ‘the first documented case’ of AI agentic ransomware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/#website\",\"url\":\"https:\\\/\\\/americanhomejournals.com\\\/\",\"name\":\"American home journals\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/americanhomejournals.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/americanhomejournals.com\\\/#\\\/schema\\\/person\\\/a3bb30439d8074c26cddd2e4af7af957\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"http:\\\/\\\/americanhomejournals.com\"],\"url\":\"https:\\\/\\\/americanhomejournals.com\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cybersecurity firm says it found 'the first documented case' of AI agentic ransomware - American home journals","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/americanhomejournals.com\/?p=2020","og_locale":"en_US","og_type":"article","og_title":"Cybersecurity firm says it found 'the first documented case' of AI agentic ransomware - American home journals","og_description":"Researchers at Sysdig say they found \"a warning sign\" of where ransomware attacks are heading.","og_url":"https:\/\/americanhomejournals.com\/?p=2020","og_site_name":"American home journals","article_published_time":"2026-07-06T17:07:25+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/americanhomejournals.com\/?p=2020#article","isPartOf":{"@id":"https:\/\/americanhomejournals.com\/?p=2020"},"author":{"name":"admin","@id":"https:\/\/americanhomejournals.com\/#\/schema\/person\/a3bb30439d8074c26cddd2e4af7af957"},"headline":"Cybersecurity firm says it found ‘the first documented case’ of AI agentic ransomware","datePublished":"2026-07-06T17:07:25+00:00","mainEntityOfPage":{"@id":"https:\/\/americanhomejournals.com\/?p=2020"},"wordCount":579,"commentCount":0,"image":{"@id":"https:\/\/americanhomejournals.com\/?p=2020#primaryimage"},"thumbnailUrl":"https:\/\/americanhomejournals.com\/wp-content\/uploads\/2026\/07\/1d2577ffa3eda5e662385e0ec1b1fa9c.webp","articleSection":["AI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/americanhomejournals.com\/?p=2020#respond"]}]},{"@type":"WebPage","@id":"https:\/\/americanhomejournals.com\/?p=2020","url":"https:\/\/americanhomejournals.com\/?p=2020","name":"Cybersecurity firm says it found 'the first documented case' of AI agentic ransomware - American home journals","isPartOf":{"@id":"https:\/\/americanhomejournals.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/americanhomejournals.com\/?p=2020#primaryimage"},"image":{"@id":"https:\/\/americanhomejournals.com\/?p=2020#primaryimage"},"thumbnailUrl":"https:\/\/americanhomejournals.com\/wp-content\/uploads\/2026\/07\/1d2577ffa3eda5e662385e0ec1b1fa9c.webp","datePublished":"2026-07-06T17:07:25+00:00","author":{"@id":"https:\/\/americanhomejournals.com\/#\/schema\/person\/a3bb30439d8074c26cddd2e4af7af957"},"breadcrumb":{"@id":"https:\/\/americanhomejournals.com\/?p=2020#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/americanhomejournals.com\/?p=2020"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/americanhomejournals.com\/?p=2020#primaryimage","url":"https:\/\/americanhomejournals.com\/wp-content\/uploads\/2026\/07\/1d2577ffa3eda5e662385e0ec1b1fa9c.webp","contentUrl":"https:\/\/americanhomejournals.com\/wp-content\/uploads\/2026\/07\/1d2577ffa3eda5e662385e0ec1b1fa9c.webp","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/americanhomejournals.com\/?p=2020#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/americanhomejournals.com\/"},{"@type":"ListItem","position":2,"name":"Cybersecurity firm says it found ‘the first documented case’ of AI agentic ransomware"}]},{"@type":"WebSite","@id":"https:\/\/americanhomejournals.com\/#website","url":"https:\/\/americanhomejournals.com\/","name":"American home journals","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/americanhomejournals.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/americanhomejournals.com\/#\/schema\/person\/a3bb30439d8074c26cddd2e4af7af957","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","caption":"admin"},"sameAs":["http:\/\/americanhomejournals.com"],"url":"https:\/\/americanhomejournals.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=\/wp\/v2\/posts\/2020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2020"}],"version-history":[{"count":0,"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=\/wp\/v2\/posts\/2020\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=\/wp\/v2\/media\/2019"}],"wp:attachment":[{"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/americanhomejournals.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}