Pith. sign in

Paper Citation Record · LEDGER

Ransomware 3.0: Self-Composing and LLM-Orchestrated

As of 9 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 3 inbound Pith citation observations for arXiv:2508.20444.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2508.20444 v1

Coverage vector

measured 58 of 58 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-05T15:09:23.898503Z

measured 61 of 61 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-08T04:19:18.930875Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-05-12T10:56:30.195915Z

Reference resolution

58 of 58 outbound references displayed

  • verified exact0
  • verified fuzzy43
  • unresolved15
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation f6de8efa-7f4e-486a-869a-4a270fd0994e · outbound

This paper cites Jimenez, Farshad Khor- rami, Prashanth Krishnamurthy, Brendan Dolan-Gavitt, Muhammad Shafique, Karthik Narasimhan, Ramesh Karri, and Ofir Press.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Jimenez, Farshad Khor- rami, Prashanth Krishnamurthy, Brendan Dolan-Gavitt, Muhammad Shafique, Karthik Narasimhan, Ramesh Karri, and Ofir Press

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.554326Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.671601Z digest=sha256:bb4fb677124610e62ce57f1622e93c5012e39f471315074bdbb66b6cb0295559

Observation 258176c0-4947-4ec4-bd18-7355ace1d6b3 · outbound

This paper cites Cyberattacks using chatgpt: Exploring ma- licious content generation through prompt engineer- ing.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Cyberattacks using chatgpt: Exploring ma- licious content generation through prompt engineer- ing

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.541481Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.676665Z digest=sha256:e385c7182d1669afdee12654efc3770589652b59262c282ee98f2d353328c925

Observation 00c0bd70-64fb-47f3-8a4e-1b5b6beb219e · outbound

This paper cites Hiper-early detection of a ransomware attack using hard- ware performance counters.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Hiper-early detection of a ransomware attack using hard- ware performance counters

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.529465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.680732Z digest=sha256:f3323a64d5fbf2ff1f62d93ad3784e0bcd2d0ef98e96f23895b294e303857fab

Observation d4fe06de-c294-4fb2-a07e-6fb9949ed6aa · outbound

This paper cites RatGPT: Turning online LLMs into Proxies for Malware Attacks.

Ransomware 3.0: Self-Composing and LLM-Orchestrated RatGPT: Turning online LLMs into Proxies for Malware Attacks

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.685666Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.685666Z digest=sha256:b80c8581b346ee0f96e4061d12bad2c8e19fcab3c9afc4519c12eef9560605fa

Observation 303bc857-d907-4a6c-a040-4e24f47f9838 · outbound

This paper cites Cy- berSecEval 2: A wide-ranging cybersecurity evaluation suite for large language models, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Cy- berSecEval 2: A wide-ranging cybersecurity evaluation suite for large language models, 2024

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.517896Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.690252Z digest=sha256:baa0015faeacd1ed639c3e89d498b0db39587ba4fff08c817ad2f78ff970fc9e

Observation 1a8b0a43-6535-4f0b-bf6b-2fa0b8104583 · outbound

This paper cites Gpthreats-3: Is automatic malware generation a threat? In 2023 IEEE Security and Privacy Workshops (SPW), pages 238–254.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Gpthreats-3: Is automatic malware generation a threat? In 2023 IEEE Security and Privacy Workshops (SPW), pages 238–254

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.506373Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.695665Z digest=sha256:a9a8063537fc7a5b5d15c16b9d27669c6592a98cac129215b0128884c66d17ba

Observation 95d76718-2953-4059-bf7e-72e2d53977d2 · outbound

This paper cites From Text to MITRE Techniques: Exploring the Malicious Use of Large Language Models for Generating Cyber Attack Payloads.

Ransomware 3.0: Self-Composing and LLM-Orchestrated From Text to MITRE Techniques: Exploring the Malicious Use of Large Language Models for Generating Cyber Attack Payloads

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.701321Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.701321Z digest=sha256:e76769f8b0a0d4b41ec5447a65dcf8a470e946939b3a61ca780fd75da6f3614a

Observation 26a61fd3-42d9-487a-95a4-52622edc941a · outbound

This paper cites DARPA cyber grand challenge.

Ransomware 3.0: Self-Composing and LLM-Orchestrated DARPA cyber grand challenge

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.494612Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.705818Z digest=sha256:60e69a5ad6a55ee261319b188907c9b226c36b8ace8c736802ff33428955fec8

Observation 5c033fa3-c935-414f-96e6-861a35da1239 · outbound

This paper cites DARPA AIxCC.

Ransomware 3.0: Self-Composing and LLM-Orchestrated DARPA AIxCC

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.482472Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.709612Z digest=sha256:c7d9e5c06bbc29762f48e3cb44db56c62e43cea023a873b4fcd4f14a8ce81ffb

Observation f81f2c18-91ad-4cd5-b19c-01e029f7d414 · outbound

This paper cites PentestGPT: An LLM- empowered automatic penetration testing tool, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated PentestGPT: An LLM- empowered automatic penetration testing tool, 2024

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.470600Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.713960Z digest=sha256:2222f2994c426372d78b58bbec3a85125e5de9abc6e3523d442093b69bb87170

Observation fc40aaef-8322-40a4-ba2d-d7eeef8c06b3 · outbound

This paper cites Lockbit 2.0 ransomware: Analysis of infection, persistence, preven- tion mechanism.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Lockbit 2.0 ransomware: Analysis of infection, persistence, preven- tion mechanism

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.458494Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.717955Z digest=sha256:c8574a8bae8873a269ead1fe1994212c1fe2f5f607b0dbdb94c342b41dc27498

Observation 5b6477e1-cc41-4434-b2af-78cc72372cc2 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 12

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.446519Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.722011Z digest=sha256:628291d9e9eed569e42c83c978b25c9f1e2c61f5a81150198bbf3c9aa78e57f5

Observation 9f18ebe4-4e8a-493c-8d10-b876910fd9bc · outbound

This paper cites The emerging threat of ai-driven cyber attacks: A review.

Ransomware 3.0: Self-Composing and LLM-Orchestrated The emerging threat of ai-driven cyber attacks: A review

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.436353Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.725810Z digest=sha256:3ac7b8e877420f30b2acc340c67331d068cd544c881415562bfed6d118461afb

Observation ce31f1a0-66d5-4b0d-81ea-a5508e1528da · outbound

This paper cites Chawla, Olaf Wiest, and Xian- gliang Zhang.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Chawla, Olaf Wiest, and Xian- gliang Zhang

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.425731Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.730749Z digest=sha256:926e678b1e938ce46aca74ba712b29cc242f53abeed121a0cb86ded4358b4e2f

Observation 2c54d754-c7fc-4efd-8880-2b3793a61343 · outbound

This paper cites Blackmamba: Ai-synthesized, polymorphic key- logger with on-the-fly program modification.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Blackmamba: Ai-synthesized, polymorphic key- logger with on-the-fly program modification

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.415252Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.734784Z digest=sha256:3f62db65b4325a2338806e3abb1aadc17cff7c028b057229df6dfa760332ffad

Observation f1dcebe1-c6dd-4d9c-81b9-fc3d5e2068e1 · outbound

This paper cites Cryptolocker ransomware.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Cryptolocker ransomware

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.404308Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.739627Z digest=sha256:914a319fc171776787384e8b8d80e8015a3feea269deb25a0799ddc8f37e40d8

Observation 2a93e4c1-7cbd-4cfc-bc2b-12803d4eb6b8 · outbound

This paper cites Kaspersky uncovers $500k crypto heist through malicious packages targeting cursor users.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Kaspersky uncovers $500k crypto heist through malicious packages targeting cursor users

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.393167Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.744076Z digest=sha256:8549f874ba1ceb4a6d9d886e62f68ff5585c3c8008390629ec9c46c6db91a311

Observation 39007f09-b1ff-421a-a900-2be56a048fed · outbound

This paper cites An investigation on wannacry ransomware and its detection.

Ransomware 3.0: Self-Composing and LLM-Orchestrated An investigation on wannacry ransomware and its detection

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.381872Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.748418Z digest=sha256:f6762e1e1dde3298ff4ab8ef39a7e105b9e64ea1ee432b2923a6eecfc4d116e3

Observation dd22c00f-24f1-40db-aa98-f4799421668e · outbound

This paper cites lfs: Go package partially implementing the lu- afilesystem module for gopher-lua.

Ransomware 3.0: Self-Composing and LLM-Orchestrated lfs: Go package partially implementing the lu- afilesystem module for gopher-lua

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.371636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.752384Z digest=sha256:b3a5dc0aaf9c05eb8580b8be8fded420545124509f37eec4af8c574430dc9d1a

Observation 26fd7e9c-27d6-4822-83f0-2f74e8316374 · outbound

This paper cites An analysis of the recent ransomware families.

Ransomware 3.0: Self-Composing and LLM-Orchestrated An analysis of the recent ransomware families

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.361003Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.756386Z digest=sha256:3223a74cc06462ecc338718581daba7c4429d9faae48168f986e2f8ba0d612bc

Observation 7207f408-d18e-42b1-97b0-fa4761dbe0c7 · outbound

This paper cites Openai compatibility api.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Openai compatibility api

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.349394Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.760991Z digest=sha256:01c00e97ae44043d3ac79d5237b6872031fb7a95ace65cc04759536f2bfc25f5

Observation f48f1fd9-c12a-4eca-a072-df3f5b696aa1 · outbound

This paper cites GRACE: Empowering LLM-based soft- ware vulnerability detection with graph structure and in-context learning.

Ransomware 3.0: Self-Composing and LLM-Orchestrated GRACE: Empowering LLM-based soft- ware vulnerability detection with graph structure and in-context learning

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.338239Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.765376Z digest=sha256:8e5df418966b2ce7893a35e63eb1bf94ec538b42a07c78ddc74e2c6600317fbb

Observation 63706b7b-2c2e-4c3e-a924-02bb4b317916 · outbound

This paper cites Evaluating large language models as agents in the clinic.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Evaluating large language models as agents in the clinic

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.326863Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.769373Z digest=sha256:3d7dbfa1f3560717e9ea69db4d1aea71eda4a604cb469be29a1afa7deb678e49

Observation 9b6b1450-144a-47f7-9596-5f1a2fb9825c · outbound

This paper cites Ransomware payout statistics 2025: Trends, costs & industry insights.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Ransomware payout statistics 2025: Trends, costs & industry insights

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.316866Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.773495Z digest=sha256:0f12203a329c146c919cdb3ca23cac05143f3040744c966821857860bf676b95

Observation ff769594-c4f2-48ab-b84f-b74ecb48983c · outbound

This paper cites Large language models in cybersecu- rity: State-of-the-art, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Large language models in cybersecu- rity: State-of-the-art, 2024

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.305975Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.776615Z digest=sha256:b930b6540d1d7a2807e512ad7daa5a0178236ba0c30ad5f24c4711d6d9c0f1b4

Observation f442d691-aa0a-4e62-9e09-e82243b57bf0 · outbound

This paper cites HackSynth: LLM agent and evaluation framework for autonomous penetration testing, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated HackSynth: LLM agent and evaluation framework for autonomous penetration testing, 2024

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.296552Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.780394Z digest=sha256:ab50a5cfd47c84f735ffa10d5ada126a13c1df61066fcf7ad2ac7a1b55cea1cc

Observation 16c2d55c-b6db-4127-8a6b-49493b24b336 · outbound

This paper cites Introducing gpt-oss: Open-weight reasoning models.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Introducing gpt-oss: Open-weight reasoning models

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.285358Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.784562Z digest=sha256:d14a84b172bd9307ba2840ad4db18f5bb6ede60f28516964fda2a862f39d2df0

Observation bd61b2ec-e0b9-4ac1-ac90-11944df4a8cd · outbound

This paper cites Measuring The Impact Of Programming Language Distribution.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Measuring The Impact Of Programming Language Distribution

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.788686Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.788686Z digest=sha256:8122a6ef402215e39d44fa6ce549544f26f07fd50d720145a9b65f8b899720e1

Observation 426c3f66-3d60-455f-85e1-f3eb942e9287 · outbound

This paper cites Evo- lution of ransomware.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Evo- lution of ransomware

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.275093Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.792943Z digest=sha256:6bf54b40ebb1148c7c4815b5c2826e4217174f9f2e00ca61295ec5e58ec66a5b

Observation 1575e485-4b41-4197-b982-71b203aefe3e · outbound

This paper cites An attacker’s dream? exploring the capabilities of chatgpt for developing malware.

Ransomware 3.0: Self-Composing and LLM-Orchestrated An attacker’s dream? exploring the capabilities of chatgpt for developing malware

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.264804Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.795979Z digest=sha256:bb7fe4a6c13a22d241da54cac971ccf0e218dc2cc8e3774021576f6e6ecd5c70

Observation c3b06b50-569a-4d51-ae04-ef0d8614cf32 · outbound

This paper cites The malware as a service ecosystem.

Ransomware 3.0: Self-Composing and LLM-Orchestrated The malware as a service ecosystem

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.253543Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.798958Z digest=sha256:d9c2dc447619f0a500d783f42ce53aea6cfe85e112047e8bf9a94d5132872aa2

Observation a0e443a8-5535-4e31-be7f-4f172b73c339 · outbound

This paper cites gluabit32: Lua 5.2 bit32 for gopher-lua.

Ransomware 3.0: Self-Composing and LLM-Orchestrated gluabit32: Lua 5.2 bit32 for gopher-lua

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.242394Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.801896Z digest=sha256:161a3df0a70a85d986ffff6d72609e07eab7b343e25cae64a434c57c68c78215

Observation 02fb8122-48e7-488f-99c7-b62b553bbb96 · outbound

This paper cites Lua 5.1 reference manual.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Lua 5.1 reference manual

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.230595Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.805157Z digest=sha256:9be1bd5e5b20fdf28a17fe57a5a8e2ce77116c4fc81d32062acdfc1c3552f104

Observation 1ea9ee47-6ae9-4de5-b9df-227daf541410 · outbound

This paper cites Conti inc.: understanding the internal discussions of a large ransomware-as-a-service operator with machine learning.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Conti inc.: understanding the internal discussions of a large ransomware-as-a-service operator with machine learning

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.219177Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.808329Z digest=sha256:d02c31534a304a8b8cbd0a1372ec390d4491cc863aafec78bfe93b666f425066

Observation 59e2f171-3c4b-4654-b4c6-dbd7bacfe657 · outbound

This paper cites MalGEN: A Testbed for Modeling and Evaluating Malware Behaviors.

Ransomware 3.0: Self-Composing and LLM-Orchestrated MalGEN: A Testbed for Modeling and Evaluating Malware Behaviors

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.811473Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.811473Z digest=sha256:b7dd2e04f5e985e256ee79c2838edcbdc365924609c94ca7e8c16ef495187a11

Observation 32680f05-6d65-4711-8fe8-490a67ddce48 · outbound

This paper cites Gpt based malware: Unveiling vulnerabilities and creating a way forward in digital space.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Gpt based malware: Unveiling vulnerabilities and creating a way forward in digital space

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.207230Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.815693Z digest=sha256:51af6e1f7e1821bb544ed81362c8c0957ecab70439dc9ff0368ddab0e6af0730

Observation 2c5ca097-312d-4d45-b8fc-071173c122ed · outbound

This paper cites NYU CTF Bench: A scalable open- source benchmark dataset for evaluating LLMs in of- fensive security.

Ransomware 3.0: Self-Composing and LLM-Orchestrated NYU CTF Bench: A scalable open- source benchmark dataset for evaluating LLMs in of- fensive security

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.195496Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.818898Z digest=sha256:c09c0dd6bf9703297e34a41297a029243c564f50d97b7b8725e0e9a15ec73ccc

Observation 5770272e-8cfe-4254-bd57-192e9e765f5d · outbound

This paper cites CRAKEN: Cybersecurity LLM Agent with Knowledge-Based Execution.

Ransomware 3.0: Self-Composing and LLM-Orchestrated CRAKEN: Cybersecurity LLM Agent with Knowledge-Based Execution

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.822820Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.822820Z digest=sha256:5b1102f82b2482c120103fec40f120d2b1d3a606c68facf15e8b95d6b7069d37

Observation 26006739-7dac-4502-8501-9dbab51bba05 · outbound

This paper cites Documentation.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Documentation

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.183850Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.826729Z digest=sha256:bcb703b059aa1e922d08d3776c77a2c6f8c3cdd90ac907f13ca8b59931996bb2

Observation 4d4274ae-03d3-43b8-a5f9-8443c02a09ba · outbound

This paper cites SaMOSA: Sandbox for Malware Orchestration and Side-Channel Analysis.

Ransomware 3.0: Self-Composing and LLM-Orchestrated SaMOSA: Sandbox for Malware Orchestration and Side-Channel Analysis

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.830534Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.830534Z digest=sha256:082e10753cd6c244b0b1e45c1bf41f5fc4067f813429958964790bf06221fab7

Observation 92082364-ec99-4155-a5cb-1e09da288b73 · outbound

This paper cites D-CIPHER: Dynamic Collaborative Intelligent Multi-Agent System with Planner and Heterogeneous Executors for Offensive Security.

Ransomware 3.0: Self-Composing and LLM-Orchestrated D-CIPHER: Dynamic Collaborative Intelligent Multi-Agent System with Planner and Heterogeneous Executors for Offensive Security

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.834282Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.834282Z digest=sha256:3a77c4bc09f3ea00591c3b6eb997863634b8ca3ae2b016f7360a564b8bb4a867

Observation a77db132-14b1-46ab-802b-3854640b3747 · outbound

This paper cites A survey on large language model based autonomous agents.

Ransomware 3.0: Self-Composing and LLM-Orchestrated A survey on large language model based autonomous agents

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.172828Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.838385Z digest=sha256:9c983ba842d4638af3a1600d842f94116e65363d77c5dba63aef520f351983c3

Observation 91b0ebe1-bd5b-435c-8270-4c9426cc64d5 · outbound

This paper cites A comprehensive survey of llm alignment techniques: Rlhf, rlaif, ppo, dpo and more, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated A comprehensive survey of llm alignment techniques: Rlhf, rlaif, ppo, dpo and more, 2024

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-05T15:09:23.841542Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:09:23.841542Z digest=sha256:161504e9046f3a66c0c099063eeca82bfa5a2f56a0c9031a1e760e9dbff08159

Observation 28e2e0bf-d763-415b-b7c1-655c340f0390 · outbound

This paper cites Jailbroken: How does llm safety training fail? Advances in Neural Information Processing Systems, 36:80079– 80110, 2023.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Jailbroken: How does llm safety training fail? Advances in Neural Information Processing Systems, 36:80079– 80110, 2023

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.156151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.845643Z digest=sha256:a967e92b4f83efa1cb6b0e97e18ef5452699fd380e25b56ff3532d22f93f9f9d

Observation 971ea2ba-644f-41f5-b822-d328f00b9922 · outbound

This paper cites List of applications using lua.

Ransomware 3.0: Self-Composing and LLM-Orchestrated List of applications using lua

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.145069Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.849459Z digest=sha256:690eeb927cfaa876cb727045e9f3136dcd909c432b017b79858e61d469eae61b

Observation f2862fbd-5767-4561-91cf-9d2b6511e451 · outbound

This paper cites Autopwn: Artifact-assisted heap exploit generation for ctf pwn competitions.IEEE Trans- actions on Information Forensics and Security, 19:293– 306, 2024.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Autopwn: Artifact-assisted heap exploit generation for ctf pwn competitions.IEEE Trans- actions on Information Forensics and Security, 19:293– 306, 2024

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.133792Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.853201Z digest=sha256:bc9ff9e85f20d5d7f0b66a0fcf65d8eb2aa2370f5b6d720a29095516da45967c

Observation fc2a8902-8a04-476e-9ad4-4ff292dcd85a · outbound

This paper cites Combining uncensored and censored llms for ransomware generation.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Combining uncensored and censored llms for ransomware generation

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.123114Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.856300Z digest=sha256:6a49e7f0dd2e7c3f5566e59960a0442fd7ff5f0fd5045aaaf7b1276c4c987921

Observation 98d77a2d-2171-45c4-bad7-8e1f3e61aeed · outbound

This paper cites Jimenez, Alexander Wettig, Kil- ian Lieret, Shunyu Yao, Karthik R.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Jimenez, Alexander Wettig, Kil- ian Lieret, Shunyu Yao, Karthik R

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.108885Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.860822Z digest=sha256:2e15285b1ee49900e23ce4d33d27b448a19a8767ca8389d1f8e9d6c920023f9f

Observation a4230be4-04a9-4fc3-b9ab-54e742950075 · outbound

This paper cites Narasimhan, and Yuan Cao.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Narasimhan, and Yuan Cao

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.096852Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.864726Z digest=sha256:c587f4d8d2450913b25ee084b9998d9e51a639d4794a1d280c0985a7e25595c5

Observation df4d3e7f-0319-41ef-bb27-2831e20ee54c · outbound

This paper cites Gopherlua: Vm and compiler for lua in go.https: //github.com/yuin/gopher-lua, 2025.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Gopherlua: Vm and compiler for lua in go.https: //github.com/yuin/gopher-lua, 2025

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.085937Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.868909Z digest=sha256:94b8c380b879457fd1b7ca2a259bd792bacc8c38bc6c81047ec533b38cf680ff

Observation 58f149b3-a1d8-4b08-98c4-6aad939879c0 · outbound

This paper cites key: value.

Ransomware 3.0: Self-Composing and LLM-Orchestrated key: value

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.073239Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.871856Z digest=sha256:b093a6283cb4be7033f5e8d43b7102532b893e70e115dc1f448600b9a0f0fb8a

Observation 9c6135be-fec3-4888-bb78-7d0128aef118 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 52

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.061894Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.875606Z digest=sha256:7858ff375ac3969f256bf54a8a5e26a5c27d6e3ba0328bb940e02bd87610e0f8

Observation 0b5c1ba7-94aa-493d-a2e6-efc4d2635fae · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.051152Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.879214Z digest=sha256:1d2be12e62a1ccbf5dc33a80a368af82fc055ffbe13aee8eaf9f86965a633b35

Observation 0c1236cb-2762-4744-a63f-939ffeff771f · outbound

This paper cites rb") if not f then return false end local content = f:read(.

Ransomware 3.0: Self-Composing and LLM-Orchestrated rb") if not f then return false end local content = f:read(

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:09:24.038673Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.882548Z digest=sha256:6d0ee8f57301f91a589e2af82463dd8487de1cc781762c8e90c49db9ec54dd76

Observation dafba68d-dcd8-4937-8319-8a4316f0af24 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 55

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.026562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.886563Z digest=sha256:582be4e62b5708ae36da30d8843b8ed7ea2a182713ee1f7b4ca9004ef1c707ba

Observation f3bd47da-b3d9-42d3-8d5b-acad82a8f23c · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 56

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.015528Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.890653Z digest=sha256:548253bda4f6c8d62b101b0b80b20099508f7cd84456248d3ac473a75f829b29

Observation ad53bd03-83f5-4294-9a3d-943cdbac8433 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 57

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:24.005062Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.894609Z digest=sha256:7a73f1395105a36556c8db454088ca8862ab43c72e69b18cc5244718c6457c41

Observation d8727074-64e6-4ea8-9ec5-e5b5ad348743 · outbound

This paper cites an unresolved cited work.

Ransomware 3.0: Self-Composing and LLM-Orchestrated Unresolved cited work

Reference 58

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:09:23.994385Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-05T15:09:23.898503Z digest=sha256:a6eb8214afa1c369e1d4e98c8782e9dcf84ea9d9c1dbaa3d5519f75b22c81d93

Pith citing papers

Observation 50cf89a2-c19e-4856-917f-325eab88e5fd · inbound

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code cites this paper.

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code Ransomware 3.0: Self-Composing and LLM-Orchestrated

Reference 60

Resolution
verified exact
arxiv_id, observed 2026-05-12T10:56:30.198127Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-05-07T15:35:02.934397Z digest=sha256:118f422586c0fb1634ab6b21221d7802e25b813cbeec6790bab9613ac51e0e93

Observation 8cc091a5-9cea-4ff0-9422-55a72de0ccf7 · inbound

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code cites this paper.

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code Ransomware 3.0: Self-Composing and LLM-Orchestrated

Reference 60

Resolution
verified exact
arxiv_id, observed 2026-05-09T06:15:39.520878Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-05-08T18:39:02.963388Z digest=sha256:e08d94bf425b4e5c6811e7adf06481e419a4b4706b4ef6f5d0288c6e109963d5

Observation 7b4ed8a7-be5c-46b1-9c7b-f414df53b433 · inbound

Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models cites this paper.

Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models Ransomware 3.0: Self-Composing and LLM-Orchestrated

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-08T04:19:18.930875Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T04:19:18.930875Z digest=sha256:575282528ebd1d988ebaeddf1ad3305daf86f27d217255fd1e53f893b7930522