Ransomware dwell time hits low of 24 hours

Ransomware is being deployed within one day of initial access in over 50% of cyber attacks, says Secureworks Counter Threat Unit. Key access vectors include scan-and-exploit, stolen credentials, and commodity malware via phishing emails. The reduced time is largely due to cybercriminals wanting to lower detection likelihoods. Despite several high-profile takedowns and sanctions, threat groups remain active and considerably adapt to maintain the threat. The report also revealed a rise in victim and data leaks and identified geopolitical motives as the driving force for state-sponsored threats.