Ransomware gangs have long targeted high-value assets and sensitive data for their attacks This article explores ransomware encforge targets. . Initially, the operator exploited a vulnerable instance of Langflow through an unauthenticated remote code execution (RCE) flaw, which CISA added to its Known Exploited Vulnerabilities (KEV) catalog in May 2025.
Langflow is a prime target due to its storage of LLM provider keys, cloud credentials, and connections to vector databases and object stores within the victim's environment. The actor then moved on to a separate production database, where they encrypted 1,342 configuration items using the database's built-in Advanced Encryption Standard (AES) function, AES_ENCRYPT().
It employs a hybrid encryption method – AES-256 in counter mode, with the per-run key wrapped by an embedded RSA-2048 public key and encrypting files regionally instead of whole-file encryption like LockBit and BlackCat ransomware. ENCFORGE targets roughly 180 file extensions, all of which are building blocks of AI systems: model formats, vector indices, training datasets, and more. Within just 5 minutes and 24 seconds, the agent iterated six Python scripts through the Langflow RCE channel, each script addressing a specific failure encountered by the previous one.
JADEPUFFER started by extracting provider keys and cloud credentials from a single compromised host, probed internal services to check their accessibility, then replayed the credentials against internal databases and cache services to see what they would unlock.
