Sam Sa Ransomware Attacks: A Year in Review
Summary: Unit 42 analyzed 60 unique SamSa ransomware samples collected over 12 months and found the group, which targets specific organizations rather than broad internet users, had received roughly 607 BTC across 19 observed Bitcoin addresses, an estimated $450,000 at a rate of $744.43 per BTC. The authors changed internal .NET project names repeatedly, mostly after April, and in one version passed the Bitcoin address as a second argument so payments could not be tracked.
Bottom line: SamSa's haul rose from confirmed profits of $70,000 when Unit 42 first reported on the group to an estimated $450,000, and Unit 42 notes the true figure is likely much higher because samples it could not obtain are not counted.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026