Pith. sign in

Paper Citation Record · LEDGER

Ransomware 3.0: Self-Composing and LLM-Orchestrated

As of 21 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 3 inbound Pith citation observations for arXiv:2508.20444.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2508.20444 v1

Coverage vector

measured 58 of 58 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-05T15:09:23.898503Z

measured 61 of 61 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-08T04:19:18.930875Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-05-12T10:56:30.195915Z

Reference resolution

58 of 58 outbound references displayed

  • verified exact0
  • verified fuzzy43
  • unresolved15
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation f6de8efa-7f4e-486a-869a-4a270fd0994e · outbound

This paper cites Jimenez, Farshad Khor- rami, Prashanth Krishnamurthy, Brendan Dolan-Gavitt, Muhammad Shafique, Karthik Narasimhan, Ramesh Karri, and Ofir Press.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Jimenez, Farshad Khor- rami, Prashanth Krishnamurthy, Brendan Dolan-Gavitt, Muhammad Shafique, Karthik Narasimhan, Ramesh Karri, and Ofir Press

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.554326Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.671601Z digest=sha256:1b414fb8487d2471a3773a5d3a4ab063648b3b8a3e4d8593e53bfd433e49bedf

Observation 258176c0-4947-4ec4-bd18-7355ace1d6b3 · outbound

This paper cites Cyberattacks using chatgpt: Exploring ma- licious content generation through prompt engineer- ing.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Cyberattacks using chatgpt: Exploring ma- licious content generation through prompt engineer- ing

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.541481Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.676665Z digest=sha256:32d16d200059233aa1bf5e7a10703bd7529ccfcdec4d29175e559c5535c20ab9

Observation 00c0bd70-64fb-47f3-8a4e-1b5b6beb219e · outbound

This paper cites Hiper-early detection of a ransomware attack using hard- ware performance counters.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Hiper-early detection of a ransomware attack using hard- ware performance counters

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.529465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.680732Z digest=sha256:9193d60df33cf7f6d346f36f103a973c8665f27560bc128b54182e473c4047d0

Observation d4fe06de-c294-4fb2-a07e-6fb9949ed6aa · outbound

This paper cites RatGPT: Turning online LLMs into Proxies for Malware Attacks.

Ransomware 3.0: Self-Composing and LLM-Orchestrated RatGPT: Turning online LLMs into Proxies for Malware Attacks

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.685666Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.685666Z digest=sha256:a68c78a236367185a435e9d31de5cf39841ed7af8615e8e7efca90e27861259c

Observation 303bc857-d907-4a6c-a040-4e24f47f9838 · outbound

This paper cites Cy- berSecEval 2: A wide-ranging cybersecurity evaluation suite for large language models, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Cy- berSecEval 2: A wide-ranging cybersecurity evaluation suite for large language models, 2024

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.517896Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.690252Z digest=sha256:5b75fd1fdf5db9826cefabdf828fb81cda1d7870ab93c79776df9c96571c4da7

Observation 1a8b0a43-6535-4f0b-bf6b-2fa0b8104583 · outbound

This paper cites Gpthreats-3: Is automatic malware generation a threat? In 2023 IEEE Security and Privacy Workshops (SPW), pages 238–254.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Gpthreats-3: Is automatic malware generation a threat? In 2023 IEEE Security and Privacy Workshops (SPW), pages 238–254

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.506373Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.695665Z digest=sha256:61ab0b5ec8e3126e4c6602f435879b55b6c31106560047e987cf90df84cd71ce

Observation 95d76718-2953-4059-bf7e-72e2d53977d2 · outbound

This paper cites From Text to MITRE Techniques: Exploring the Malicious Use of Large Language Models for Generating Cyber Attack Payloads.

Ransomware 3.0: Self-Composing and LLM-Orchestrated From Text to MITRE Techniques: Exploring the Malicious Use of Large Language Models for Generating Cyber Attack Payloads

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.701321Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.701321Z digest=sha256:aeeb29b834becb80e47243e114738dc28dcf43722e83e37f872b925e35df9ca3

Observation 26a61fd3-42d9-487a-95a4-52622edc941a · outbound

This paper cites DARPA cyber grand challenge.

Ransomware 3.0: Self-Composing and LLM-Orchestrated DARPA cyber grand challenge

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.494612Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.705818Z digest=sha256:1f52a79acad49dc8211ecf9d36322339c3e674780b7892ec603acbbfac067d1f

Observation 5c033fa3-c935-414f-96e6-861a35da1239 · outbound

This paper cites DARPA AIxCC.

Ransomware 3.0: Self-Composing and LLM-Orchestrated DARPA AIxCC

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.482472Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.709612Z digest=sha256:ff12a306e84d9599ec5872caa278102b50a1f3daf3ca3bcc1d96891a91147f4c

Observation f81f2c18-91ad-4cd5-b19c-01e029f7d414 · outbound

This paper cites PentestGPT: An LLM- empowered automatic penetration testing tool, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated PentestGPT: An LLM- empowered automatic penetration testing tool, 2024

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.470600Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.713960Z digest=sha256:b971bc0861ee7c77fc9011a40ea72af01fcaa9cf6ba64d533722396a72e77a01

Observation fc40aaef-8322-40a4-ba2d-d7eeef8c06b3 · outbound

This paper cites Lockbit 2.0 ransomware: Analysis of infection, persistence, preven- tion mechanism.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Lockbit 2.0 ransomware: Analysis of infection, persistence, preven- tion mechanism

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.458494Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.717955Z digest=sha256:d6bb5d10c033c98db0449dbb40835d1ec233f1a6353e7c17be66efb6afbb3fc2

Observation 5b6477e1-cc41-4434-b2af-78cc72372cc2 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 12

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.446519Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.722011Z digest=sha256:ad36a14c0cb409ce9dd86c988563ab787b4e1432b8aa752a626a89b5cc518381

Observation 9f18ebe4-4e8a-493c-8d10-b876910fd9bc · outbound

This paper cites The emerging threat of ai-driven cyber attacks: A review.

Ransomware 3.0: Self-Composing and LLM-Orchestrated The emerging threat of ai-driven cyber attacks: A review

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.436353Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.725810Z digest=sha256:d81bdbfe80f6d1ad4742b743c9103dd51c9bff56d90b3497d4d03f646c38a0db

Observation ce31f1a0-66d5-4b0d-81ea-a5508e1528da · outbound

This paper cites Chawla, Olaf Wiest, and Xian- gliang Zhang.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Chawla, Olaf Wiest, and Xian- gliang Zhang

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.425731Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.730749Z digest=sha256:d21315d1606a015d713944d64c6fe88feef92c11fcbc9e925275074d3c6ac69f

Observation 2c54d754-c7fc-4efd-8880-2b3793a61343 · outbound

This paper cites Blackmamba: Ai-synthesized, polymorphic key- logger with on-the-fly program modification.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Blackmamba: Ai-synthesized, polymorphic key- logger with on-the-fly program modification

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.415252Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.734784Z digest=sha256:b45e731047068d6ab8d6f81c84ebbe7784b2a2f9d27bd78b15f5f7e82053b15a

Observation f1dcebe1-c6dd-4d9c-81b9-fc3d5e2068e1 · outbound

This paper cites Cryptolocker ransomware.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Cryptolocker ransomware

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.404308Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.739627Z digest=sha256:fb8dfc7fb2cb0082ca80c3d337ffd54620740d5c38aad9ee39b880d32ae4cf6d

Observation 2a93e4c1-7cbd-4cfc-bc2b-12803d4eb6b8 · outbound

This paper cites Kaspersky uncovers $500k crypto heist through malicious packages targeting cursor users.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Kaspersky uncovers $500k crypto heist through malicious packages targeting cursor users

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.393167Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.744076Z digest=sha256:39a702338a257f929bfce7351065c6b5676eeb273ed451c8ed43e4c3670640e4

Observation 39007f09-b1ff-421a-a900-2be56a048fed · outbound

This paper cites An investigation on wannacry ransomware and its detection.

Ransomware 3.0: Self-Composing and LLM-Orchestrated An investigation on wannacry ransomware and its detection

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.381872Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.748418Z digest=sha256:f436c2aaf5c1b545a62d2bd2774d5134d261ce926e14115e2eadcd64dc766281

Observation dd22c00f-24f1-40db-aa98-f4799421668e · outbound

This paper cites lfs: Go package partially implementing the lu- afilesystem module for gopher-lua.

Ransomware 3.0: Self-Composing and LLM-Orchestrated lfs: Go package partially implementing the lu- afilesystem module for gopher-lua

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.371636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.752384Z digest=sha256:cbafc5fa8e4359b3c9e5c29979b67bdddb3918be7c0f3aa49e6f552a633ab0c5

Observation 26fd7e9c-27d6-4822-83f0-2f74e8316374 · outbound

This paper cites An analysis of the recent ransomware families.

Ransomware 3.0: Self-Composing and LLM-Orchestrated An analysis of the recent ransomware families

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.361003Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.756386Z digest=sha256:b3438d94c54f0e3f3db8515ed9a8dce420e6e73ec2b8ac77ceef3da47d8387c0

Observation 7207f408-d18e-42b1-97b0-fa4761dbe0c7 · outbound

This paper cites Openai compatibility api.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Openai compatibility api

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.349394Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.760991Z digest=sha256:3b3b44bd13fc54058c6b54a203c6fedb2b3d1aa324e7790e2c6aea1eb9c029f5

Observation f48f1fd9-c12a-4eca-a072-df3f5b696aa1 · outbound

This paper cites GRACE: Empowering LLM-based soft- ware vulnerability detection with graph structure and in-context learning.

Ransomware 3.0: Self-Composing and LLM-Orchestrated GRACE: Empowering LLM-based soft- ware vulnerability detection with graph structure and in-context learning

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.338239Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.765376Z digest=sha256:2657acd3353bbf399e02acea61c63f0960ea25982b3c1e455f4c45b1f2f6dca0

Observation 63706b7b-2c2e-4c3e-a924-02bb4b317916 · outbound

This paper cites Evaluating large language models as agents in the clinic.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Evaluating large language models as agents in the clinic

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.326863Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.769373Z digest=sha256:fce0521af5e7489460b58b3b08bd8aef9d5e6ab8cf758577700dd7cf6eec6c40

Observation 9b6b1450-144a-47f7-9596-5f1a2fb9825c · outbound

This paper cites Ransomware payout statistics 2025: Trends, costs & industry insights.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Ransomware payout statistics 2025: Trends, costs & industry insights

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.316866Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.773495Z digest=sha256:ef1333e83b03f40789e5941c5fcc89c843c19ba7e5fa3ef305828e66311e1ecf

Observation ff769594-c4f2-48ab-b84f-b74ecb48983c · outbound

This paper cites Large language models in cybersecu- rity: State-of-the-art, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Large language models in cybersecu- rity: State-of-the-art, 2024

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.305975Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.776615Z digest=sha256:2edd6d132a9ea7086ac53f351dada91c8f9ce5b9bdcc408adf254ff10c48a0af

Observation f442d691-aa0a-4e62-9e09-e82243b57bf0 · outbound

This paper cites HackSynth: LLM agent and evaluation framework for autonomous penetration testing, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated HackSynth: LLM agent and evaluation framework for autonomous penetration testing, 2024

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.296552Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.780394Z digest=sha256:18e65ee253606d2a6b3b6c251fd4f13d7f099c3a7e05925bbe3b7baac2f1aae5

Observation 16c2d55c-b6db-4127-8a6b-49493b24b336 · outbound

This paper cites Introducing gpt-oss: Open-weight reasoning models.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Introducing gpt-oss: Open-weight reasoning models

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.285358Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.784562Z digest=sha256:ebf7333fbbde27fa898246f28a782a0b9915f5431c7d494b882ec31e7c7585bd

Observation bd61b2ec-e0b9-4ac1-ac90-11944df4a8cd · outbound

This paper cites Measuring The Impact Of Programming Language Distribution.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Measuring The Impact Of Programming Language Distribution

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.788686Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.788686Z digest=sha256:0280e6b061bf73c198be174e146e92e940b32b519669b616359392781d008583

Observation 426c3f66-3d60-455f-85e1-f3eb942e9287 · outbound

This paper cites Evo- lution of ransomware.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Evo- lution of ransomware

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.275093Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.792943Z digest=sha256:3e27981a9fa760d1c4d09aa37f26f096abe0691683532e94b919e1ebad5e3155

Observation 1575e485-4b41-4197-b982-71b203aefe3e · outbound

This paper cites An attacker’s dream? exploring the capabilities of chatgpt for developing malware.

Ransomware 3.0: Self-Composing and LLM-Orchestrated An attacker’s dream? exploring the capabilities of chatgpt for developing malware

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.264804Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.795979Z digest=sha256:1ffa9c6b98f4b67e6914d1b61c49a809c79fbf44adbca70be934b3acf78958b2

Observation c3b06b50-569a-4d51-ae04-ef0d8614cf32 · outbound

This paper cites The malware as a service ecosystem.

Ransomware 3.0: Self-Composing and LLM-Orchestrated The malware as a service ecosystem

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.253543Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.798958Z digest=sha256:7868481335ad3d72dc07e423762bbb3e900871ebaff2e2f310c249771ca77bbd

Observation a0e443a8-5535-4e31-be7f-4f172b73c339 · outbound

This paper cites gluabit32: Lua 5.2 bit32 for gopher-lua.

Ransomware 3.0: Self-Composing and LLM-Orchestrated gluabit32: Lua 5.2 bit32 for gopher-lua

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.242394Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.801896Z digest=sha256:8b8adc0e33186dfc2c96f2dfc789e5a45bc4debdeba23b8fccb1e89d060a057e

Observation 02fb8122-48e7-488f-99c7-b62b553bbb96 · outbound

This paper cites Lua 5.1 reference manual.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Lua 5.1 reference manual

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.230595Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.805157Z digest=sha256:18edd4b36e723c01e617fa7f56e806a2ba571b294778fadf8532fd5711f75526

Observation 1ea9ee47-6ae9-4de5-b9df-227daf541410 · outbound

This paper cites Conti inc.: understanding the internal discussions of a large ransomware-as-a-service operator with machine learning.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Conti inc.: understanding the internal discussions of a large ransomware-as-a-service operator with machine learning

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.219177Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.808329Z digest=sha256:8bb3ad5113b946ca52036a82e07b2e42e3dfdc2783e4ff87c2378619588a7fdb

Observation 59e2f171-3c4b-4654-b4c6-dbd7bacfe657 · outbound

This paper cites MalGEN: A Testbed for Modeling and Evaluating Malware Behaviors.

Ransomware 3.0: Self-Composing and LLM-Orchestrated MalGEN: A Testbed for Modeling and Evaluating Malware Behaviors

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.811473Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.811473Z digest=sha256:6644b4c4c625367afc34f4e593e3f35ba4582d9490be9676f7d85cf0cf1917b6

Observation 32680f05-6d65-4711-8fe8-490a67ddce48 · outbound

This paper cites Gpt based malware: Unveiling vulnerabilities and creating a way forward in digital space.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Gpt based malware: Unveiling vulnerabilities and creating a way forward in digital space

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.207230Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.815693Z digest=sha256:6f31692d71ed28cda3bc299d1e1f0055313cb7d7f1c834c5ea1dedac90202d88

Observation 2c5ca097-312d-4d45-b8fc-071173c122ed · outbound

This paper cites NYU CTF Bench: A scalable open- source benchmark dataset for evaluating LLMs in of- fensive security.

Ransomware 3.0: Self-Composing and LLM-Orchestrated NYU CTF Bench: A scalable open- source benchmark dataset for evaluating LLMs in of- fensive security

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.195496Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.818898Z digest=sha256:3b243c89f314fd49cf24f24462ff4cc12ebe77b8bec283af6eb1c9caee8c4936

Observation 5770272e-8cfe-4254-bd57-192e9e765f5d · outbound

This paper cites CRAKEN: Cybersecurity LLM Agent with Knowledge-Based Execution.

Ransomware 3.0: Self-Composing and LLM-Orchestrated CRAKEN: Cybersecurity LLM Agent with Knowledge-Based Execution

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.822820Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.822820Z digest=sha256:535de7e57e76bac282f21861aaf2b4430f6024ccda01ccfeab31f8fb070d4885

Observation 26006739-7dac-4502-8501-9dbab51bba05 · outbound

This paper cites Documentation.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Documentation

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.183850Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.826729Z digest=sha256:163e7198646cc0c139019d5275f2c97f07afb6ccb138ad70aa5cdeb9f26d542c

Observation 4d4274ae-03d3-43b8-a5f9-8443c02a09ba · outbound

This paper cites SaMOSA: Sandbox for Malware Orchestration and Side-Channel Analysis.

Ransomware 3.0: Self-Composing and LLM-Orchestrated SaMOSA: Sandbox for Malware Orchestration and Side-Channel Analysis

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.830534Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.830534Z digest=sha256:082e10753cd6c244b0b1e45c1bf41f5fc4067f813429958964790bf06221fab7

Observation 92082364-ec99-4155-a5cb-1e09da288b73 · outbound

This paper cites D-CIPHER: Dynamic Collaborative Intelligent Multi-Agent System with Planner and Heterogeneous Executors for Offensive Security.

Ransomware 3.0: Self-Composing and LLM-Orchestrated D-CIPHER: Dynamic Collaborative Intelligent Multi-Agent System with Planner and Heterogeneous Executors for Offensive Security

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.834282Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.834282Z digest=sha256:be1eafa1ed79667fd8f77168271452e11d14f5d25781523c5855aa81a9dbc94d

Observation a77db132-14b1-46ab-802b-3854640b3747 · outbound

This paper cites A survey on large language model based autonomous agents.

Ransomware 3.0: Self-Composing and LLM-Orchestrated A survey on large language model based autonomous agents

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.172828Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.838385Z digest=sha256:e960b5b2839fe01b64f0725c99225078bd50fb1d2e54df2ddc8f879564cc4fdb

Observation 91b0ebe1-bd5b-435c-8270-4c9426cc64d5 · outbound

This paper cites A comprehensive survey of llm alignment techniques: Rlhf, rlaif, ppo, dpo and more, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated A comprehensive survey of llm alignment techniques: Rlhf, rlaif, ppo, dpo and more, 2024

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.841542Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.841542Z digest=sha256:161504e9046f3a66c0c099063eeca82bfa5a2f56a0c9031a1e760e9dbff08159

Observation 28e2e0bf-d763-415b-b7c1-655c340f0390 · outbound

This paper cites Jailbroken: How does llm safety training fail? Advances in Neural Information Processing Systems, 36:80079– 80110, 2023.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Jailbroken: How does llm safety training fail? Advances in Neural Information Processing Systems, 36:80079– 80110, 2023

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.156151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.845643Z digest=sha256:e065f5d577d9c43942b158f84cbcc2bd97f87c63b2fd7f6344b0b17bed4c05eb

Observation 971ea2ba-644f-41f5-b822-d328f00b9922 · outbound

This paper cites List of applications using lua.

Ransomware 3.0: Self-Composing and LLM-Orchestrated List of applications using lua

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.145069Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.849459Z digest=sha256:0185e0e5626de0f9cfebdeb36bf1143cb0fe1099738212449773b2905f61ce38

Observation f2862fbd-5767-4561-91cf-9d2b6511e451 · outbound

This paper cites Autopwn: Artifact-assisted heap exploit generation for ctf pwn competitions.IEEE Trans- actions on Information Forensics and Security, 19:293– 306, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Autopwn: Artifact-assisted heap exploit generation for ctf pwn competitions.IEEE Trans- actions on Information Forensics and Security, 19:293– 306, 2024

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.133792Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.853201Z digest=sha256:cedf04217e8c6e9730fd382e10057fad9f035d61d0b59dd89a2a98ccb4f10fa7

Observation fc2a8902-8a04-476e-9ad4-4ff292dcd85a · outbound

This paper cites Combining uncensored and censored llms for ransomware generation.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Combining uncensored and censored llms for ransomware generation

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.123114Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.856300Z digest=sha256:9e9475cce6e0a9c1de59d1615b1b6b094f93aec29adeb61c9e6fbb42b523a3ad

Observation 98d77a2d-2171-45c4-bad7-8e1f3e61aeed · outbound

This paper cites Jimenez, Alexander Wettig, Kil- ian Lieret, Shunyu Yao, Karthik R.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Jimenez, Alexander Wettig, Kil- ian Lieret, Shunyu Yao, Karthik R

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.108885Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.860822Z digest=sha256:989ae285d572fab95112f7c7e78f214cdd5d8d617bdeebd2693f8cf5048efd40

Observation a4230be4-04a9-4fc3-b9ab-54e742950075 · outbound

This paper cites Narasimhan, and Yuan Cao.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Narasimhan, and Yuan Cao

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.096852Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.864726Z digest=sha256:34ad0a15ace2e250a641535ee4ede3e7e3447bbbb4edac080e062aa0a2a888d9

Observation df4d3e7f-0319-41ef-bb27-2831e20ee54c · outbound

This paper cites Gopherlua: Vm and compiler for lua in go.https: //github.com/yuin/gopher-lua, 2025.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Gopherlua: Vm and compiler for lua in go.https: //github.com/yuin/gopher-lua, 2025

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.085937Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.868909Z digest=sha256:9cdd67049d52e47190e211e9fe2a2d90602212a1d5e51802b4fb54915cfd74fd

Observation 58f149b3-a1d8-4b08-98c4-6aad939879c0 · outbound

This paper cites key: value.

Ransomware 3.0: Self-Composing and LLM-Orchestrated key: value

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.073239Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.871856Z digest=sha256:00496bf1a30adf758f6145b7059657f56d65349c044c46446677efa13426507d

Observation 9c6135be-fec3-4888-bb78-7d0128aef118 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 52

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.061894Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.875606Z digest=sha256:1182cb245b66fd28159020db656cca565c1799572c1f349e94c8db87ae2c0bd4

Observation 0b5c1ba7-94aa-493d-a2e6-efc4d2635fae · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.051152Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.879214Z digest=sha256:8935f756b6601f84e48a630c8a7b1da1e08e204fc378f92a05899814f0d99bbe

Observation 0c1236cb-2762-4744-a63f-939ffeff771f · outbound

This paper cites rb") if not f then return false end local content = f:read(.

Ransomware 3.0: Self-Composing and LLM-Orchestrated rb") if not f then return false end local content = f:read(

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.038673Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.882548Z digest=sha256:2b548bb76549c33b0cd9e699eaef5989f6bc940834b2bb29c9269c46e7682fa9

Observation dafba68d-dcd8-4937-8319-8a4316f0af24 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 55

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.026562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.886563Z digest=sha256:9f5b540c9b755be0973c27f7e98565590ea4c1ad1c8217acc13cb576fcc61ed8

Observation f3bd47da-b3d9-42d3-8d5b-acad82a8f23c · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 56

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.015528Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.890653Z digest=sha256:db5574e13e64b0188edd614689657f092348b2b5a1d6ced7497e80054d954d3b

Observation ad53bd03-83f5-4294-9a3d-943cdbac8433 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 57

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.005062Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.894609Z digest=sha256:92860227c289a0885b6185e76a19bc8876f85270a0650b9575865124802da72a

Observation d8727074-64e6-4ea8-9ec5-e5b5ad348743 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 58

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:23.994385Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-05T15:09:23.898503Z digest=sha256:e4349f91554721936f967ef0dc7a9b15f7c20baf138e91fd1d266274ea84562d

Pith citing papers

Observation 50cf89a2-c19e-4856-917f-325eab88e5fd · inbound

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code cites this paper.

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code Ransomware 3.0: Self-Composing and LLM-Orchestrated

Reference 60

Resolution
verified exact
arxiv_id, observed 2026-05-12T10:56:30.198127Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-05-07T15:35:02.934397Z digest=sha256:63eef729c55b40364f3d1b168934a1b93870ce4344b7a378c4619ba37b217981

Observation 8cc091a5-9cea-4ff0-9422-55a72de0ccf7 · inbound

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code cites this paper.

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code Ransomware 3.0: Self-Composing and LLM-Orchestrated

Reference 60

Resolution
verified exact
arxiv_id, observed 2026-05-09T06:15:39.520878Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-05-08T18:39:02.963388Z digest=sha256:62857285705f27a5d8611ebb1a0cc9f6cbe936119a76b7f1a490667224718eed

Observation 7b4ed8a7-be5c-46b1-9c7b-f414df53b433 · inbound

Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models cites this paper.

Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models Ransomware 3.0: Self-Composing and LLM-Orchestrated

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-08T04:19:18.930875Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T04:19:18.930875Z digest=sha256:c236fd74cfe8339cc6a206000b30a44ef99bd8907bfd682989f2fc8ba322b749