---
title: "The ‘first’ AI-run ransomware attack still needed a human"
url: https://daily.dev/posts/the-first-ai-run-ransomware-attack-still-needed-a-human-cpxib3mqk
source_url: https://techcrunch.com/2026/07/06/the-first-ai-run-ransomware-attack-still-needed-a-human
type: article
source: "TechCrunch"
published: 2026-07-06T23:59:45.195Z
updated: 2026-07-07T00:00:10.226Z
tags: ["cyber", "ai-agents", "ransomware", "sysdig"]
reading_time: 4
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# The ‘first’ AI-run ransomware attack still needed a human

**[TechCrunch](https://daily.dev/sources/tc)** · 4 min read · 0 upvotes · 0 comments

## Summary

Sysdig's JadePuffer case — billed as the first AI-run ransomware attack — is more nuanced than initial headlines suggested. While an AI agent autonomously handled technical execution (exploiting a Langflow vulnerability, moving laterally to a MySQL server, encrypting 1,300+ records, and writing its own ransom note), a human still selected the victim, provisioned infrastructure, and supplied pre-stolen credentials. The agent's speed was notable — fixing a failed login in 31 seconds while narrating its own reasoning. Sysdig could not identify the specific model powering the agent. A Microsoft researcher theorized it used a stripped open-weight model rather than a frontier model, and warned that ransomware campaigns may soon scale to thousands of simultaneous operations, though human bottlenecks in victim selection and infrastructure setup remain a limiting factor for now.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://techcrunch.com/2026/07/06/the-first-ai-run-ransomware-attack-still-needed-a-human>

## Similar posts on daily.dev

- [AI agent ran a full ransomware attack solo, Sysdig says](https://daily.dev/posts/ai-agent-ran-a-full-ransomware-attack-solo-sysdig-says-fkl5ap8hg) · The Next Web · 0 upvotes · 0 comments
- [AI agent runs first end-to-end ransomware attack](https://daily.dev/posts/ai-agent-runs-first-end-to-end-ransomware-attack-ulfxi7gog) · The Next Web · 1 upvotes · 0 comments
- [This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransom](https://daily.dev/posts/this-ai-agent-autonomously-hacked-a-network-adapted-on-the-fly-and-demanded-a-ransom-u3norexvg) · CSO Online · 0 upvotes · 0 comments
- [JadePuffer Demonstrates How AI Agents Can Automate Ransomware Attack](https://daily.dev/posts/jadepuffer-demonstrates-how-ai-agents-can-automate-ransomware-attack-yxxnlhy7h) · Security Boulevard · 0 upvotes · 0 comments
- [JadePuffer Signals a New Era of AI-Driven Ransomware](https://daily.dev/posts/jadepuffer-signals-a-new-era-of-ai-driven-ransomware-rvacyt3ln) · Security Boulevard · 0 upvotes · 0 comments

---

Tags: [#cyber](https://daily.dev/tags/cyber), [#ai-agents](https://daily.dev/tags/ai-agents), [#ransomware](https://daily.dev/tags/ransomware), [#sysdig](https://daily.dev/tags/sysdig)

[View this post on daily.dev](https://daily.dev/posts/the-first-ai-run-ransomware-attack-still-needed-a-human-cpxib3mqk)