{"schema_version":"0.10.0","id":"LR-2026-0290","record_version":2,"title":"n0n ransomware crew's exposed staging server reveals AI coding agent configuration and attack tooling","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":45.2,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":4.8,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-10-31","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: Crypto Briefing · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-10-31","history":[{"date":"2026-10-31","from_level":null,"to_level":"preliminary","reason":"1 report: Crypto Briefing · subject to change"}]},"sources_hash":"6c2d04fe59d0e7132aa107689b708b7eab521bffe47f80b525fa9910beb26cd4"},"system":{"model_name":"unknown","model_version":null,"developer":"unknown","harness":"opencode","tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":"agentic_with_tools","intended_use":"write, adjust and manage the crew's attack tooling at scale","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-30","incident_class":"security_compromise","failure_class":null,"agent_involved":false,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"public_researcher","summary":"SOCRadar found a staging server belonging to the n0n ransomware group exposed online in late September 2026, holding 1,719 files including 829 attack scripts, five encryptor versions and configuration for an opencode AI coding agent drawing on 154 models.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":"third_party","adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":23,"severity":"major","severity_because":"major, because many third parties: The crew's leak site lists 93 victims and 23 confirmed targeted organizations across 14 countries were affected.","harm_class":["third_party_security","operational"],"affected_description":"23 confirmed targeted organizations across 14 countries; leak site lists 93 victims","protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://cryptobriefing.com/n0n-ransomware-ai-tools-exposed-server/","publisher":"Crypto Briefing","date":"2026-10-30","type":"press","title":"N0n ransomware group spends $7K on AI tools, then leaves its own server wide open","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"system.model_name":"D","system.harness":"C","system.integration_type":"D","system.intended_use":"D","system.developer":"D","system.deployment_context":"D","system.autonomy_level":"D","event.responsible_party":"D","event.adversarial_actor":"D","event.agent_involved":"D","event.detection_method":"D","event.incident_class":"D","event.summary":"D","event.date_disclosed":"A","event.trigger":"D","impact.third_parties_affected_count":"C","impact.harm_class":"D","impact.affected_description":"C","impact.severity":"D","context.industry":"D","context.systemic_exposure":"D","context.denominator_available":"D","context.country":"D","impact.severity_because":"D"},"field_citations":{"system.harness":[{"source_index":0,"quote":"Researchers also found configuration details for an AI coding agent called opencode."}],"system.developer":[{"source_index":0,"quote":"The setup drew on 154 models from a range of providers."}],"system.model_name":[{"source_index":0,"quote":"The setup drew on 154 models from a range of providers."}],"system.integration_type":[{"source_index":0,"quote":"A coding agent wired into 154 models suggests a crew using AI to write, adjust and manage its tooling at scale, which may help explain how a group could generate 829 attack scripts."}],"system.intended_use":[{"source_index":0,"quote":"A coding agent wired into 154 models suggests a crew using AI to write, adjust and manage its tooling at scale, which may help explain how a group could generate 829 attack scripts."}],"system.deployment_context":[{"source_index":0,"quote":"Researchers also found configuration details for an AI coding agent called opencode."}],"event.detection_method":[{"source_index":0,"quote":"SOCRadar’s Threat Research Unit found the server in late September 2026."}],"event.incident_class":[{"source_index":0,"quote":"The n0n extortion group left a staging server exposed online, putting its tools, scripts and methods on display for anyone who looked."}],"event.adversarial_actor":[{"source_index":0,"quote":"A ransomware crew that tried to break into 23 organizations across 14 countries forgot one small detail: locking its own door."}],"event.responsible_party":[{"source_index":0,"quote":"The n0n extortion group left a staging server exposed online, putting its tools, scripts and methods on display for anyone who looked."}],"event.agent_involved":[{"source_index":0,"quote":"The AI component appears to sit behind the door, not in front of it."}],"event.summary":[{"source_index":0,"quote":"SOCRadar’s Threat Research Unit found the server in late September 2026."}],"impact.third_parties_affected_count":[{"source_index":0,"quote":"There is a gap worth noting. The leak site lists 93 victims, while the confirmed count of targeted organizations stands at 23 across 14 countries."}],"impact.affected_description":[{"source_index":0,"quote":"There is a gap worth noting. The leak site lists 93 victims, while the confirmed count of targeted organizations stands at 23 across 14 countries."}],"impact.harm_class":[{"source_index":0,"quote":"A ransomware crew that tried to break into 23 organizations across 14 countries forgot one small detail: locking its own door."},{"source_index":0,"quote":"The n0n extortion group left a staging server exposed online, putting its tools, scripts and methods on display for anyone who looked."}],"context.systemic_exposure":[{"source_index":0,"quote":"The setup drew on 154 models from a range of providers."}],"context.country":[{"source_index":0,"quote":"A ransomware crew that tried to break into 23 organizations across 14 countries forgot one small detail: locking its own door."}],"context.industry":[{"source_index":0,"quote":"N0n emerged in September 2026 and has claimed attacks across logistics, healthcare and government."}],"impact.severity":[{"source_index":0,"quote":"There is a gap worth noting. The leak site lists 93 victims, while the confirmed count of targeted organizations stands at 23 across 14 countries."}],"impact.severity_because":[{"source_index":0,"quote":"There is a gap worth noting. The leak site lists 93 victims, while the confirmed count of targeted organizations stands at 23 across 14 countries."}],"event.date_disclosed":[{"source_index":0,"quote":"published: 2026-10-30"}]},"notes_on_gaps":"Only one source (Crypto Briefing press) is available; no primary disclosure, court filing or regulator statement. The incident is the exposure of a criminal crew's own staging server, not a failure of the AI agent itself: the source states the AI component 'appears to sit behind the door, not in front of it', so event.agent_involved is false and event.failure_class is left null (no agent mechanism is stated). event.trigger is omitted: no source states what set the exposure off. event.root_cause is omitted: no source names what failed in the exposure. event.date_occurred is taken from the late-September 2026 discovery date, which is the only date stated; the actual exposure date is not given. system.model_name, model_version and developer are unknown: 154 models from a range of providers are mentioned without naming any. system.autonomy_level, permissions_scope, guardrails_present, safeguard_state and lifecycle_stage are not stated. impact.direct_loss_usd is null: the $7,216 figure is the crew's own API spend, not a loss to a victim. impact.third_parties_affected_count of 23 is the confirmed targeted organizations, not parties harmed by this exposure. impact.severity is graded major on the many-third-parties rung (23 confirmed targets, 93 claimed victims); no dollar loss figure is stated for the exposure itself. context.industry and country are unknown; the crew operated across 14 countries. No containment, notification or remediation is stated. event.date_occurred: a source described it but did not state it; left null. system.tier: not set; no operator named and deployment_context is not a lab's. [aggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-31] system.model_name: classified from described behaviour. system.integration_type: classified from described behaviour. system.intended_use: classified from described behaviour. system.developer: no source names the developer. system.deployment_context: no source states where it ran. system.autonomy_level: no source states the arrangement. event.responsible_party: third_party. event.adversarial_actor: external_attacker. event.agent_involved: classified from described behaviour. event.detection_method: classified from described behaviour. event.incident_class: a source states an attacker, an injected instruction or a misused credential caused the system to act, or that the system's own boundary (sandbox, permissions, weights, accounts) was breached. event.summary: classified from described behaviour. event.trigger: no source states a cause. impact.harm_class: classified from described behaviour. context.industry: classified from described behaviour. context.systemic_exposure: classified from described behaviour. context.denominator_available: no denominator is available for this incident. context.country: no source states the operator's location."},"context":{"industry":"unknown","org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":false,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"The n0n ransomware crew ran an opencode AI coding agent wired to 154 models to write, adjust and manage its attack tooling at scale, alongside credential stuffing against FortiGate SSL-VPN appliances and exposed RDP.","quote":"A coding agent wired into 154 models suggests a crew using AI to write, adjust and manage its tooling at scale, which may help explain how a group could generate 829 attack scripts.","source_index":0,"grade":"D"},{"step":"went_wrong","text":"The crew left its own staging server exposed online, putting its tools, scripts and methods on display for anyone who looked.","quote":"The n0n extortion group left a staging server exposed online, putting its tools, scripts and methods on display for anyone who looked.","source_index":0,"grade":"C"},{"step":"reached","text":"The exposed server held 1,719 files, including 829 attack scripts and source code for five encryptor versions, plus opencode configuration details.","quote":"It held 1,719 files.","source_index":0,"grade":"C"},{"step":"caught","text":"SOCRadar's Threat Research Unit found the exposed server in late September 2026.","quote":"SOCRadar’s Threat Research Unit found the server in late September 2026.","source_index":0,"grade":"C"}],"model":"deepseek-chat","prompt_version":"aggregate-2026-09-27.1","extracted_at":"2026-10-31","source_urls":["https://cryptobriefing.com/n0n-ransomware-ai-tools-exposed-server/"]}}