JADEPUFFER Agentic Ransomware Targeting Cloud Environments (Campaign)
ID: ee5af758-293f-568e-bf15-da7ed59b93d8
STIX ID: report--ee5af758-293f-568e-bf15-da7ed59b93d8
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2026-09-26
Date Updated: 2026-10-06
Author: [email protected] (Wiz Threat Research)
...
...
JADEPUFFER (Storm-3168) is an agentic ransomware operation active in June 2026 that leverages exposed secrets and exploits in Internet-facing software to compromise cloud environments; reported activity includes accessing managed Azure services and self-hosted instances (Langflow, Nacos, WordPress, PHP-CGI, MySQL, MinIO) and subsequently encrypting or deleting accessible data.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.