New Spirals Ransomware Encrypts Victim Network in Under 24 Hours

**Executive Summary:** The report describes a new, fast-acting ransomware group called _Spirals_ that completes initial access, credential harvesting, lateral movement, data exfiltration, and network-wide encryption in under 24 hours using a double-extortion model; indicators include a .spirals file extension and READ_ME_SPIRALS.txt ransom notes, and the advisory contains detection and mitigation recommendations (patching, MFA, offline backups, monitoring for LSASS/Kerberoast activity).