a security firm documented an llm-driven ransomware operation, named jadepuffer, that ran a complete attack cycle — breaking in, stealing credentials, moving through networks, encrypting and destroying data — with no human operator involved. this is the first documented case of ransomware executed end-to-end by an ai agent. the structural shift is that attack capacity no longer scales with the number of human criminals available.