---
title: "The SamSam Ransomware Is Absolutely No Joke - Get a Free Network Security Consultation in South Florida"
description: "It may have a funny name, but the SamSam ransomware is no laughing matter. Find out more about it today at our blog."
url: "https://www.l7solutions.com/blog/the-samsam-ransomware-is-absolutely-no-joke"
date: "2026-06-20T11:55:20+00:00"
language: "en-GB"
---
## Get a Free Network Security Consultation in South Florida
Get a free network security consultation today from L7 Solutions. We are your partner for managed services & IT support in South Florida and beyond. Call today.
[ Categories ](https://www.l7solutions.com/blog/categories "Categories")
[ Tags ](https://www.l7solutions.com/blog/tags "Tags")
[ Categories: All Categories ](https://www.l7solutions.com/javascript:void(0); "Categories")
Search...Suggested keywords
[ x ](https://www.l7solutions.com/javascript:void(0);)
# The SamSam Ransomware Is Absolutely No Joke
[LSeven Solutions Blog](https://www.l7solutions.com/blog/categories/blog) [Security](https://www.l7solutions.com/blog/categories/security)
[LSeven Solutions Admin](https://www.l7solutions.com/blog/blogger/l7-admin)
Friday, 21 December 2018
[ 0 Comments ](https://www.l7solutions.com/blog/the-samsam-ransomware-is-absolutely-no-joke#comments)
[  ](//www.l7solutions.com/images/easyblog_shared/December_2018/12-21-18/samsam_ransomware_400.jpg "The SamSam Ransomware Is Absolutely No Joke")
The funny thing about ransomware is that they give them very strange names: Bad Rabbit sounds like the name of a villainous bunny who gets his comeuppance in some type of modern nursery rhyme, not malware that would ravage hundreds of European businesses. Locky seems like the son of Candado de seguridad, a character Medeco would come up with to educate kids on proper physical security. The latest in a long line of funny-named ransomware, SamSam, isn’t a pet name for your pet ferret you perplexingly named Sam, it is one of the worst ransomware strains ever, and it has caught the attention of U.S. Federal law enforcement.
Both the Federal Bureau of Investigation and the Department of Homeland Security have issued alerts for the ransomware, also known as MSIL/Samas.A. The alert was issued on December 3, 2018, and outlines an attack on multiple industries, some with crucial infrastructure. The ransomware has been in the news as of late, as two Iranian nationals, Faramarz Shahi Savandi and Mohammad Mehdi Shah Mansouri were indicted by a U.S. grand jury in New Jersey for ransomware attacks on the Colorado Department of Transportation.
The pair is alleged to have victimized over 200 hospitals, businesses, government agencies, and schools in the U.S. and Canada beginning in 2015; extorting over $6 million over that time. In addition to these charges, the two hackers have now been indicted by the state of Georgia on charges that they were the ones that perpetrated the ransomware systems that crippled Atlanta’s government in March of 2018. By taking almost 3,800 of the City of Atlanta’s computers hostage, prosecutors state that Mansouri and Savandi have cost the city millions of dollars in consultant fees, downtime, and other costs.
**What is SamSam?**
SamSam is a privately developed ransomware that is being used to target specific companies selected by the developers. This means that it isn’t just a commodity ransomware, it can’t be found on some type of criminal forum on the dark web, and it isn’t sold as a service like many other forms of ransomware. This is a major problem for any organization that is targeted, as none of the typical endpoint defensive strategies work to stop it.
What’s worse, is that that once a SamSam strain is used, and security vendors publish a report, another SamSam strain is developed. It is thought that this development team includes the two hackers implicated in the Colorado DoT crimes, the Atlanta crimes, and hundreds of other attacks over the past three years.
**What Can You Do?**
Thus far the SamSam ransomware has entered victims’ networks using exploits in web-facing servers. It has been deployed as millions of other pieces of malware as an executable file that is mistakenly unleashed, or via brute force via the Remote Desktop Protocol. So, while you can lock down your RDP, your best bet is to have a dedicated strategy that:
- Doesn’t allow unauthorized users to have administrative privileges
- Limits use of Domain Access accounts to administration tasks
- Doesn’t provide service accounts for important services
- Restricts access to critical systems
If you are diligent in your organizational cybersecurity practices, you should be able to conduct business as usual without having to worry about ransomware, SamSam or otherwise. If you are interested in knowing more about SamSam and how to stop it, contact the IT professionals at COMPANYNAME for more information at PHONENUMBER.
[ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/javascript:void(0);)
Tags:
[Malware](https://www.l7solutions.com/blog/tags/malware) [Hackers](https://www.l7solutions.com/blog/tags/hackers) [Ransomware](https://www.l7solutions.com/blog/tags/ransomware)
[ Why You Shouldn't Say “Humbug” to Your Security ](https://www.l7solutions.com/blog/why-you-shouldn-t-say-humbug-to-your-security)
[ Small Businesses Using Emerging Technologies to Ge... ](https://www.l7solutions.com/blog/small-businesses-using-emerging-technologies-to-get-ahead)
About the author
[  ](https://www.l7solutions.com/blog/blogger/l7-admin)
[LSeven Solutions Admin](https://www.l7solutions.com/blog/blogger/l7-admin)
[ ](https://www.l7solutions.com/javascript:void(0); "Subscribe to updates from author") [ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/blog/blogger/l7-admin)
Welcome to LSeven's Blog! Here we will share useful tips and tricks for Computers and Information on Our IT Services!
Author's recent posts
[More posts from author](https://www.l7solutions.com/blog/blogger/l7-admin)
[ Tuesday, 30 June 2026 Stop Managing Metal, Start Managing People: A Guide to Hybrid IT ](https://www.l7solutions.com/blog/stop-managing-metal-start-managing-people-a-guide-to-hybrid-it)
[ Saturday, 27 June 2026 Free AI is Not Free: Why Public Tools Are a Security Risk ](https://www.l7solutions.com/blog/free-ai-is-not-free-why-public-tools-are-a-security-risk)
[ Thursday, 25 June 2026 Phishing is Getting Sophisticated: The New Threats Businesses Face ](https://www.l7solutions.com/blog/phishing-is-getting-sophisticated-the-new-threats-businesses-face)
Comments
No comments made yet. Be the first to submit a comment
**** Already Registered? [Login Here](https://www.l7solutions.com/component/users/login?return=aHR0cHM6Ly93d3cubDdzb2x1dGlvbnMuY29tL2Jsb2cvdGhlLXNhbXNhbS1yYW5zb213YXJlLWlzLWFic29sdXRlbHktbm8tam9rZQ==&Itemid=101)
Saturday, 20 June 2026
Subscribe to the blog (Please fill in your email address to subscribe to updates from this post.)
**Captcha Image**
## Schema
```json
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"position": 1,
"name": "Home",
"item": "https://www.l7solutions.com"
},
{
"@type": "ListItem",
"position": 2,
"name": "Blog",
"item": "https://www.l7solutions.com/blog"
},
{
"@type": "ListItem",
"position": 3,
"name": "LSeven Solutions Admin",
"item": "https://www.l7solutions.com/blog/blogger/l7-admin"
},
{
"@type": "ListItem",
"position": 4,
"name": "The SamSam Ransomware Is Absolutely No Joke",
"item": "https://www.l7solutions.com/blog/the-samsam-ransomware-is-absolutely-no-joke"
}
]
}
```