Microsoft Defender blocks QNET ransomware in 128 seconds

Microsoft Defender for Endpoint's attack disruption isolated a device 128 seconds after detecting QNET ransomware, blocking an mshta.exe payload before it could download a second stage.