More than 2,000 agency computers had to be shut down on Feb 21 to prevent the ransomware from spreading. Attackers encrypted some files and requested bitcoin in exchange for the decryption key. DoT is working with a security company to repair the system, the FBI was also called in for further investigation of the damage. SamSam doesnt spread via phishing campaigns but takes advantage of unsecured devices directly connected to the internet and uses them to spread laterally across the network.”]