Indicators of Compromise

r.stdout.strip

r.stdout

c.commit

c.cursor

pymysql.connect

mysql.func

conn.commit

bcrypt.hashpw

bcrypt.gensalt

ET.fromstring

root.findall

bucket.find

f.write

data.decode

urllib.request

creds.json

http://:4444/beacon

r.read

subprocess.run

urllib.request.urlopen

credentials.json

64.20.53.230

cur.execute

urllib.request.Request

token.secret.key

45.131.66.106

JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models

8cb0c223b018cecef1d990ec81c67b826eb3c30d54f06193cf69969e9a8baea2

JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models

ab9824b61587c77a8d8649545cdbdc63ed2c384e45c9aba534e3f457f96efa7a

JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models

ea7822eac6cecef7746c606b862b4d3034856caf754c4cf69533662637905328

JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models