OTX Threat: JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models

An advanced threat actor identified as JADEPUFFER has evolved its capabilities, now deploying ENCFORGE, a specialized ransomware targeting AI and ML infrastructure. The actor exploits CVE-2025-3248 in Langflow to gain initial access, then autonomously chains reconnaissance, credential harvesting, and lateral movement. ENCFORGE is a compiled Go binary targeting approximately 180 file extensions spe CVEs: CVE-2025-3248 Sectors: Technology