New "Spirals" Ransomware Encrypts Enterprise Network in Under 24 Hours
RedSide Security July 18, 2026 Cybercrime 4 views
A newly discovered ransomware family named Spirals encrypted an enterprise network in less than 24 hours after compromising an internet-facing IIS server. The Rust-based ransomware used web shells, Cloudflare tunnels, credential dumping, WMI, and PsExec to achieve rapid domain-wide deployment before encrypting systems and threatening data leaks.
SOC
Cybersecurity
Malware
ThreatIntelligence
RedSideSecurity
ActiveDirectory
ThreatHunting
BlueTeam
IncidentResponse
WindowsSecurity
InfoSec
Ransomware
Spirals
IIS
WebShell
PsExec
WMI
CredentialDumping
LSASS
EnterpriseSecurity
Continue reading: New "Spirals" Ransomware Encrypts Enterprise Netwo…