Check Point Threat Alert: SamSam and Maktub Ransomware Evolution

SamSam spreads by targeting and infecting servers that contain unpatched vulnerabilities. Maktub and Samsam do not communicate with a C&C server to encrypt files on an infected computer. SamSams primary target is the healthcare industry. Check Point Anti-Virus & SandBlast includes relevant Samsam and Maktub indicators for known malicious domains and related files. Ransomware.Win32.Samsam* and R.Maktub.* are both independently acting ransomware, meaning that once they are installed on a system, they encrypt the files without any need to communicate.”]

Source: https://blog.checkpoint.com/2016/03/28/check-point-threat-alert-samsam-and-maktub-ransomware-evolution/