Researchers said the group was able to move from initial phish to full domain-wide encryption in just five hours.
Source: Threadpost