One phished login is often the whole story. From mailbox access to lateral movement to ransomware, the clock can run in days when MFA is weak and backups are reachable from the same network. This is the 72-hour path in plain language — not a thriller — and the boring controls (MFA, least privilege, offline backups) that break the chain. #ransomware #phishing #cybersecurity











