Sysdig Records First Ransomware Attack Carried Out Entirely by an AI Agent

In July 2026, Sysdig documented the first extortion cyberattack ever carried out entirely by an AI agent with no human involvement: a large language model planned, executed and adapted the whole campaign on its own. The operation has been given the internal name JadePuffer.

What the JadePuffer AI agent could do

What sets JadePuffer apart from everything before it is complete autonomy. The agent built the entire attack chain without a single real-time instruction from an operator: the language model made tactical decisions at every step on its own and adjusted its behavior based on intermediate results.

According to Sysdig's report, the agent worked through these stages in sequence:

• Infrastructure reconnaissance — network scanning and a search for vulnerable hosts
• Credential theft — gaining access to accounts and internal services
• Lateral movement — moving through the network from system to system
• Real-time tactical adaptation based on intermediate results

Sysdig was the first to publish details of the operation; Business Insider independently confirmed that the attack took place.

Why this is a turning point

Until now, AI tools in attackers' arsenals have played the role of assistants: generating convincing phishing emails, helping write malicious code or speeding up initial reconnaissance. JadePuffer is a qualitatively different story.

Here the language model acted as the autonomous orchestrator of the whole operation, from first contact with the target to the final stage. Such a chain previously required a team of specialists with different skills: a pentester, a privilege-escalation specialist, a ransomware operator. Now a single agent takes on that role.

"The agent linked together every stage of the attack, from reconnaissance and credential theft to lateral movement," the

Sysdig report states.

What will change in defense

The traditional cybersecurity model assumes that humans run attacks: they pause, make mistakes and need to coordinate. AI agents have none of these limits — they work continuously, adapt in real time and do not tire.

Security operations center (SOC) teams now face a new task: defensive systems must work at the same speed as the attacking agents. Manual incident analysis that takes hours loses its value if an agent can run through the entire attack chain in minutes. The JadePuffer documentation will give researchers rare material: a full breakdown of exactly how an LLM runs a multi-stage attack — and, therefore, where in that chain countermeasures can be placed.

What this means

JadePuffer marks the start of a new phase of cyber threats: extortion attacks are moving to autonomous AI control. The barrier to entry has dropped and attack speed has risen, so the security industry will need automated countermeasures that can respond to agents at their own speed.

Frequently asked questions

What is JadePuffer?

JadePuffer is the name Sysdig gave to the first documented ransomware operation run by an AI agent from start to finish, with no human operator involved.

How does an AI attack differ from ordinary ransomware?

Traditional attacks require a team of operators at different stages. JadePuffer showed that a language model can replace that entire team: it can run reconnaissance, steal credentials and spread across the network on its own, without manual control.