Ransomware attacks now have dwell time of 24 hours

Ransomware attacks are getting faster and more efficient, with cybercriminals now able to deploy ransomware in just 24 hours, according to a new study by Secureworks.

In 2023, the average dwell time for ransomware attacks fell to 24 hours, down from 4.5 days in 2022 and 5.5 days in 2021. This means that cybercriminals are now able to encrypt their victims’ data much faster than ever before, making it even more difficult for organizations to recover.

The study also found that in nearly two-thirds of cases analyzed, cybercriminals were able to deploy ransomware within a day of gaining initial access to the victim’s network. In more than 10 percent of cases, ransomware was deployed within five hours.

Secureworks researchers attribute the acceleration of ransomware attacks to factors like improved detection technologies, increased popularity of Ransomware-as-a-service (RaaS), and increased use of vulnerabilities and stolen credentials.

Secureworks also identified vulnerability-scanning tools, stolen credentials, and phishing emails as the three main initial access drivers that are being used to facilitate ransomware attacks.

The sources for this piece include an article in TheRegister.

Top Stories

Related Articles

May 31, 2025 A coordinated supply chain attack has compromised between 500 and 1,000 e-commerce websites by exploiting vulnerabilities in 21 more...

May 31, 2025 A widely used open-source Go library, easyjson, used in healthcare, finance and even defence has come under scrutiny more...

May 31, 2025 (EDITORIAL) A messaging tool used by Trump administration officials to archive encrypted Signal messages has been hacked — more...

April 22, 2025 Anthropic, a leading artificial intelligence company, anticipates that AI-powered virtual employees could begin operating within corporate networks as more...

Jim Love

Jim Is and author and pud cast host with over 40 years in technology.