Ransomware · 59 days ago
Spirals shows how fast a ransomware incident can collapse the usual response gap. If theft and encryption both land inside the same business day, overnight triage and next-day containment can arrive after the damage is already done.
BleepingComputer says the actor moved from initial access to data theft and encryption in under 24 hours on a corporate network. The point is not the brand of ransomware. It is the compressed timeline, which turns one incident into a race against the clock before backup recovery or incident response can get traction.
2 sources covering this story
Spirals ransomware locks down victim systems in under 24 hours - Help Net Security
A new ransomware strain called Spirals hit an IT services company in South Asia, going from breach to full encryption in a single day.
New Spirals ransomware encrypts victim network in under 24 hours
A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in less than 24 hours.
Part of the PlainSec briefing for 2026-07-18