TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Infosecurity Magazine

Researchers Observe Sub-One-Hour Ransomware Attacks

2026-04-02 · Read original ↗

ATT&CK techniques detected

4 predictions
T1486Data Encrypted for Impact
99%
"trusted relationships ” and “ third - party access pathways ” - limiting lateral movement and credential abuse by restricting remote services and misuse of accounts - detecting data staging and exfiltration by monitoring for archive - collected data and command - and - control ch…"
T1486Data Encrypted for Impact
97%
"data staging and encryption, the report explained. a focus on speed halcyon said akira manages to complete an entire attack lifecycle in under four hours, and in some cases less than one hour without detection. this is because it is “ more stealthy and less aggressive ” than othe…"
T1486Data Encrypted for Impact
70%
"researchers observe sub - one - hour ransomware attacks security researchers have warned of another step change in the velocity of ransomware, after spotting the akira group complete all stages of an attack within an hour. halcyon said in a new report that akira usually achieves …"
T1657Financial Theft
31%
"data staging and encryption, the report explained. a focus on speed halcyon said akira manages to complete an entire attack lifecycle in under four hours, and in some cases less than one hour without detection. this is because it is “ more stealthy and less aggressive ” than othe…"

Summary

Halcyon says Akira is now capable of carrying out an entire ransomware attack in less than an hour