There is a possibility that SamSam *is* actually perpetrating a classic data breach, and that the ransomware event is a dead man's switch. This has been suggested before, though I've seen no evidence to support the theory.

← @kwm Twitter archive

Keith

@kwm

There aren't many actors giving SamSam a run for their money.

SamSam employs classic breach tactics: targeted, patient, "good enough" tools but not elaborate.

Their endgame just happens to be an availability attack vs. a classic data grab.

4/5/2018, 2:34:59 PM

Favs: 2

Retweets: 0

link

Keith

@kwm

There is a possibility that SamSam *is* actually perpetrating a classic data breach, and that the ransomware event is a dead man's switch. This has been suggested before, though I've seen no evidence to support the theory.

4/5/2018, 2:37:39 PM

Favs: 2

Retweets: 0

link