Emerging ransomware group CRYPTO24 has claimed responsibility for a cyberattack against ActionPower, indicating potential data theft and system encryption. This development signals increased activity from the threat actor in the industrial sector.
On March 27, 2026, security researchers identified new claims by the ransomware group CRYPTO24 regarding a successful attack against ActionPower, demonstrating the group's continued focus on industrial and energy sector targets. The attack potentially involves both data theft and system encryption, following the double extortion model common among contemporary ransomware operations. This incident represents a significant development in CRYPTO24's operational pattern, as it marks their first publicly claimed attack against a major industrial infrastructure provider in 2026. The timing and target selection suggest a strategic shift in the group's targeting methodology, potentially indicating a broader campaign against critical infrastructure sectors.
The ransomware group CRYPTO24 has publicly claimed responsibility for a cyberattack against ActionPower, representing a significant threat to industrial and energy sector organizations. This development was first observed on March 27, 2026, through multiple threat intelligence channels.
While specific technical details of the attack vector remain under investigation, CRYPTO24's typical tactics, techniques, and procedures (TTPs) include:
The attack potentially impacts multiple sectors:
Organizations should implement the following protective measures:
While specific IoCs for this incident are still emerging, organizations should monitor for:
Critical analysis of Windows 11's current security architecture and essential improvements needed to enhance enterprise security posture. Assessment covers key vulnerabilities, recommended security controls, and strategic remediation priorities for enterprise environments.
AI-powered social engineering attacks are increasingly targeting enterprise employees, leveraging advanced tactics to bypass security controls. These attacks can lead to significant financial losses and compromised sensitive data. This brief provides an overview of the threat landscape and recommendations for mitigation.
Analysis of security and privacy implications regarding GitHub's policy to include private repositories in AI training data. Organizations have until April 24, 2026 to opt out of having their private repository data used for AI model training.
Emerging ransomware group CRYPTO24 has claimed responsibility for a cyberattack against ActionPower, marking their latest high-profile target. This incident represents a significant escalation in the group's operations and highlights growing concerns about industrial sector targeting.