Malware
ENCFORGE
- First Reported
- Jul 21, 2026
- Latest Reported
- Aug 5, 2026
Reported Context (3)
- The month also saw Azure tenant takeover abuse, ENCFORGE ransomware targeting AI/ML assets, and several high-profile breaches affecting FastJson, Abbott Laboratories, Accenture, and Fairlife. July 2026 Security Briefing: Agentic Ransomware, GOLD EAGLE and Major Incidents
- JadePuffer returned with EncForge, a Go-based ransomware built to encrypt AI and ML assets such as model checkpoints, vector databases, training datasets, and embedding indices. Sysdig Says JadePuffer Used EncForge Ransomware to Target AI/ML Assets
- JADEPUFFER returned to a Langflow instance using CVE-2025-3248 and deployed ENCFORGE, a Go-based ransomware built to destroy AI and machine learning assets such as model checkpoints, vector databases, and training JADEPUFFER Deploys ENCFORGE Ransomware Targeting AI Model Assets
CVE (2)
Malware (1)
Threat Actors (5)
MITRE ATT&CK (20)
Vendors (3)
Products (5)
Tools (2)
Industries (3)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.