Ransomware needs a way in. Stolen credentials are the cheapest one.

POKKA Ransomware Attack

pokka.coRansomed

incransomGroup

SingaporeCountry

Jul 18, 2026Discovered

Overview

View group profile

Domain

pokka.co

Industry

Other

Country

Singapore

Discovered

about 2 months ago

Attack date

Jul 18, 2026

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

incransom

Total victims

198

First seen

Sep 2025

Last seen

Jul 2026

Group status

active

Sophistication

Impact score

121

Threat level

2.6/10

Aggressiveness5/10

Lethality0.3/10

Criticality2.5/10

Status breakdown

Data Leaked6.1%12

Negotiating0.5%1

Claimed

this victim

93.4%185

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Other

Known target sector

Country

Singapore

Frequently targeted country

Other victims

View all (198)

Same group · incransom

Group activity

Monthly attacks · incransom

198

total · avg 18/mo