City of Joburg shuts down all systems after cyber attack demanding bitcoin ransom

2019-10-25 07:43
A ransomware demand is made by cyber criminals. (Duncan Alfreds, News24, file)

A ransomware demand is made by cyber criminals. (Duncan Alfreds, News24, file)

Multimedia   ·   User Galleries   ·   News in Pictures Send us your pictures  ·  Send us your stories

The City of Joburg on Thursday night announced a breach of its network on and shut down its website and all e-services as a precautionary measure. 

In a tweet, the City said it had detected a network breach "which resulted which resulted in an unauthorised access to our information systems". 

Business Day reported that the attack comes hours after the City received a bitcoin ransom note from a group called the Shadow Kill Hackers.

READ | Notorious hacker shuts down government website... again

The City further tweeted: "The incident is currently being investigated by City of Joburg cyber security experts, who have taken immediate and appropriate action to reinforce security measures to mitigate any potential impacts. As a result several customer facing systems – including the city’s website, e-services, billing system – have been shut down...

"As a result, several customer-facing systems - including the City's website, e-services; billing system... has been shut down as a precautionary measure." 

24-hour shutdown

The City said the shutdown would last for 24 hours and meant that customers would not be able to transact on e-services or log queries at the call centre. 

According to Business Day, the note on Twitter came after several city employees received the ransom note, which reads: "All your servers and data have been hacked. We have dozens of back doors inside your city. We have control of everything in your city. We also compromised all passwords and sensitive data such as finance and personal population information."

The hackers reportedly demand the payment of 4.0 bitcoins by October 28 at 17:00 failing which they will upload all the data on to the internet.

The hack reportedly occurred at the same time that several banks also reported internet problems believed to be related to cyber attacks.

Standard Bank tweeted: "You may be finding it difficult to log on to Internet banking and our Banking App at the moment. We're working to sort this out."

ABSA similarly tweeted: "We are aware of the ongoing intermittent issues with our digital channels and our technicians are working on a fix. We will let you know as soon as that is resolved and we're up and running again. Apologies for any inconvenience caused."

Both banks have since reported that the issues had been resolved. 

- Compiled by Riaan Grobler

Read more on:    city of joburg  |  johannesburg  |  cybercrime

Inside News24

Traffic Alerts
There are new stories on the homepage. Click here to see them.


Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire network.