Ransomware needs a way in. Stolen credentials are the cheapest one.

ActionPower Ransomware Attack

actionpower.krRansomed

crypto24Group

CroatiaCountry

Mar 27, 2026Discovered

Overview

View group profile

Domain

actionpower.kr

Industry

Energy & Utilities

Country

Croatia

Discovered

6 months ago

Attack date

Mar 27, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

crypto24

Total victims

First seen

Oct 2025

Last seen

Apr 2026

Group status

active

Sophistication

Impact score

Threat level

2.7/10

Aggressiveness4.8/10

Lethality0/10

Criticality3.5/10

Status breakdown

Claimed

this victim

100.0%19

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Technology

Victim's position within group

Industry

Energy & Utilities

Known target sector

Country

Croatia

Frequently targeted country

Other victims

View all (19)

Same group · crypto24

Hamad Bin Khalifa University (HBKU)
Qatar
Claimed
Katcon
Mexico
Claimed
Industrias Guerra
Spain
Claimed
ActionPower
Croatia
Claimed
O’Farrell
Argentina
Claimed
Invaccs
India
Claimed

Group activity

Monthly attacks · crypto24

total · avg 2.7/mo