The Department of Homeland Security's NCCIC and the FBI have issued an alert about the SamSam ransomware, detailing its exploitation methods and providing mitigation strategies. Cyber actors have targeted various industries, including critical infrastructure, with victims primarily in the United States and internationally. SamSam actors gain persistent access to Windows servers, often exploiting vulnerable JBoss applications or utilizing Remote Desktop Protocol (RDP). They achieve administrator privileges and deploy malware without victim interaction, a method that bypasses typical ransomware infection vectors. Stolen RDP credentials, purchased from darknet marketplaces, are frequently used to infiltrate networks rapidly. SamSam ransomware encrypts computers and leaves ransom notes directing victims to contact actors via Tor to arrange payment in Bitcoin for decryption keys. The alert includes technical analysis reports of four SamSam malware variants. Recommended mitigations include auditing and disabling unnecessary RDP, securing open RDP ports with firewalls and VPNs, enforcing strong passwords and account lockout policies, and enabling two-factor authentication. Organizations should also regularly update systems, maintain backups, enable and review RDP login logs, and limit network exposure for critical devices. Additionally, restricting user permissions for software installation, scanning email attachments, and disabling file sharing services are advised. Further guidance on malware incident prevention is available from NIST. Contact information for reporting intrusions and requesting assistance is provided.