LLM identity unknown; autonomy inferred: JADEPUFFER database-extortion victim
Review CAT-X08 · Catalogue X08, RAT-123
EXCLUDED — rogue origin not established. Investigators lack prompt/configuration visibility. Autonomous execution is plausible, but absent human-origin evidence cannot establish self-directed rogue intent.
Reviewed: Not recorded · Rule: external-intrusion-v1
Sysdig’s original JADEPUFFER analysis describes an extortion playbook against the intended database target. Tactical reasoning and LLM-authored payloads do not show an agent departing from its malicious operator’s objective. Existing catalogue X08 already excludes this family.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Evidence status
EXCLUDED — rogue origin not established
Dates and discovery
- Incident date
- Attack date undisclosed; report Jul 1, 2026
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- Not recorded
- Discovery channel
- Not recorded
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Sysdig / Michael Clark — JADEPUFFER: agentic ransomware (Jul 1, 2026)Original account · www.sysdig.com
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
Decision history
- · Assessment imported
Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.
Evidence source - · Case-by-case comparison audit
RAT-123: out-of-scope. Sysdig’s original JADEPUFFER analysis describes an extortion playbook against the intended database target. Tactical reasoning and LLM-authored payloads do not show an agent departing from its malicious operator’s objective. Existing catalogue X08 already excludes this family. Source checks: read: https://www.sysdig.com/blog/jadepuffer-agentic-ransomware-for-automated-database-extortion. Sysdig’s original JADEPUFFER analysis describes an extortion playbook against the intended database target. Tactical reasoning and LLM-authored payloads do not show an agent departing from its malicious operator’s objective. Existing catalogue X08 already excludes this family.
Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.