A new ransomware attack observed by cybersecurity analysts allowed attackers to “domain wide” compromise a victim’s systems within four hours of their initial access, raising fears that this type of attack could target both private companies and government agencies.

The DFIR Report published an April 25 analysis of a ransomware attack that used a package of malware tools to gain widespread access to the targeted victim’s computer systems just three hours and 44 minutes after the initial intrusion. The attack represented an “extremely short” time to ransom and likely came to the victim organization through an email attachment, DFIR wrote.