How a SamSam-like attack happens, and what you can do about it