An AI-agent-driven operator first documented by Sysdig. Deployed ENCFORGE ransomware against Langflow servers, using Docker socket for host breakout. Previously used throwaway Python scripts and MySQL AES_ENCRYPT() to encrypt data in Nacos and production databases.