City of Joburg shuts down all systems after cyber attack demanding bitcoin ransom

The City of Joburg on Thursday night announced a breach of its network on and shut down its website and all e-services as a precautionary measure. 

In a tweet, the City said it had detected a network breach "which resulted which resulted in an unauthorised access to our information systems". 

Business Day reported that the attack comes hours after the City received a bitcoin ransom note from a group called the Shadow Kill Hackers.

READ | Notorious hacker shuts down government website... again

The City further tweeted: "The incident is currently being investigated by City of Joburg cyber security experts, who have taken immediate and appropriate action to reinforce security measures to mitigate any potential impacts. As a result several customer facing systems – including the city’s website, e-services, billing system – have been shut down...

"As a result, several customer-facing systems - including the City's website, e-services; billing system... has been shut down as a precautionary measure." 

24-hour shutdown

The City said the shutdown would last for 24 hours and meant that customers would not be able to transact on e-services or log queries at the call centre. 

According to Business Day, the note on Twitter came after several city employees received the ransom note, which reads: "All your servers and data have been hacked. We have dozens of back doors inside your city. We have control of everything in your city. We also compromised all passwords and sensitive data such as finance and personal population information."

The hackers reportedly demand the payment of 4.0 bitcoins by October 28 at 17:00 failing which they will upload all the data on to the internet.

The hack reportedly occurred at the same time that several banks also reported internet problems believed to be related to cyber attacks.

Standard Bank tweeted: "You may be finding it difficult to log on to Internet banking and our Banking App at the moment. We're working to sort this out."

ABSA similarly tweeted: "We are aware of the ongoing intermittent issues with our digital channels and our technicians are working on a fix. We will let you know as soon as that is resolved and we're up and running again. Apologies for any inconvenience caused."

Both banks have since reported that the issues had been resolved. 

- Compiled by Riaan Grobler

We live in a world where facts and fiction get blurred
In times of uncertainty you need journalism you can trust. For 14 free days, you can have access to a world of in-depth analyses, investigative journalism, top opinions and a range of features. Journalism strengthens democracy. Invest in the future today. Thereafter you will be billed R75 per month. You can cancel anytime and if you cancel within 14 days you won't be billed. 
Subscribe to News24
Voting Booth
What are your thoughts on the possibility of having permanent Stage 2 or 3 load shedding?
Please select an option Oops! Something went wrong, please try again later.
Results
I'll take that over constant schedule changes
13% - 1500 votes
Why are we normalising Eskom’s mess?
72% - 8224 votes
I've already found alternative ways of powering my home/business
15% - 1709 votes
Vote
Rand - Dollar
17.47
-2.2%
Rand - Pound
21.05
-0.0%
Rand - Euro
18.91
-0.0%
Rand - Aus dollar
12.09
-0.0%
Rand - Yen
0.13
-0.0%
Platinum
974.02
0.0%
Palladium
1,623.95
0.0%
Gold
1,865.16
0.0%
Silver
22.35
0.0%
Brent Crude
79.94
-2.8%
Top 40
74,082
+0.6%
All Share
80,241
+0.6%
Resource 10
75,186
+0.7%
Industrial 25
103,461
+0.8%
Financial 15
16,550
0.0%
All JSE data delayed by at least 15 minutes Iress logo
Editorial feedback and complaints

Contact the public editor with feedback for our journalists, complaints, queries or suggestions about articles on News24.

LEARN MORE