Ransomware gangs extort victims 17 hours after intrusion on average | CSO Online

Ransomware gangs are accelerating their operations, with an average time-to-ransom (TTR) of 17 hours, down from days or weeks in the past. This trend is driven by a focus on data theft extortion, particularly among groups targeting small and midsize businesses, and improvements in endpoint detection and response tools. While TTR is a useful metric, the number of malicious actions taken by attackers within the compromised environment also provides valuable insights into their tactics and objectives.