Jadepuffer Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
10
occurrences
First Seen
July 2, 2026
Last Seen
July 28, 2026

Jadepuffer is a ransomware_group tracked by ThreatCluster, appearing in 6 threat clusters built from 10 intelligence report mentions.

Jadepuffer is a ransomware_group tracked across 6 threat clusters and 10 intelligence report mentions on ThreatCluster. First observed July 2, 2026; most recent activity July 28, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Jadepuffer Agentic Ransomware For Automated Database Extortion — www.sysdig.com · July 28, 2026
  • Hermes AI agent used to automate attack on Thai Finance Ministry — Bleepingcomputer · July 24, 2026
  • Hugging Face Agentic Attacker Ai Breach 2026 — www.waxell.ai · July 21, 2026
  • AI — Rescana · July 20, 2026
  • JADEPUFFER: First Fully Autonomous AI Ransomware Attack | Let's Data Science — Letsdatascience · July 8, 2026
  • Risky Bulletin: FatFs bugs enable physical access attacks on a load of devices — News.Risky.Biz · July 3, 2026
  • 1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed — Feeds.Feedburner · July 2, 2026
  • Agentic Ransomware JADEPUFFER Uses Base64 Python Payloads to Harvest Cloud and API Keys — Cybersecuritynews · July 2, 2026

Frequently asked questions

What is Jadepuffer?

Jadepuffer is a ransomware_group tracked by ThreatCluster, appearing in 6 threat clusters built from 10 intelligence report mentions.

Is Jadepuffer still active?

The most recent intelligence report mentioning Jadepuffer on ThreatCluster is dated July 28, 2026. Activity was first observed July 2, 2026, giving a tracked span from then to July 28, 2026.

What is Jadepuffer associated with?

Across ThreatCluster reporting, Jadepuffer most frequently co-occurs with Brute Force, Credential Stuffing, Data Breach, Phishing, Ransomware, among 12 tracked related entities.

What are the latest developments involving Jadepuffer?

The most significant recent cluster is “Critical RCE Vulnerabilities in Cursor IDE Enable Zero-Click Prompt Injection Attacks” (35 articles · Updated July 1, 2026). Jadepuffer appears across 6 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Jadepuffer?

Jadepuffer appears in 10 intelligence report mentions across 6 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown