Dossier
EncForge
Coverage of EncForge in the Nexus archive.
- New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
Sysdig researchers linked a new ransomware attack using ENCFORGE to JADEPUFFER, an AI-agent-driven operator. ENCFORGE targets AI infrastructure files like model weights and training datasets on Langflow servers.
- JadePuffer agentic attacks now target AI model data with ransomware
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge, which encrypts AI assets such as training datasets, vector databases, and model checkpoints. The attack targets AI model data using ransomware.