City of Joburg shuts down all systems after cyber attack demanding bitcoin ransom

A ransomware demand is made by cyber criminals. (Duncan Alfreds, News24, file)
A ransomware demand is made by cyber criminals. (Duncan Alfreds, News24, file)

The City of Joburg on Thursday night announced a breach of its network on and shut down its website and all e-services as a precautionary measure. 

In a tweet, the City said it had detected a network breach "which resulted which resulted in an unauthorised access to our information systems". 

Business Day reported that the attack comes hours after the City received a bitcoin ransom note from a group called the Shadow Kill Hackers.

READ | Notorious hacker shuts down government website... again

The City further tweeted: "The incident is currently being investigated by City of Joburg cyber security experts, who have taken immediate and appropriate action to reinforce security measures to mitigate any potential impacts. As a result several customer facing systems – including the city’s website, e-services, billing system – have been shut down...

"As a result, several customer-facing systems - including the City's website, e-services; billing system... has been shut down as a precautionary measure." 

24-hour shutdown

The City said the shutdown would last for 24 hours and meant that customers would not be able to transact on e-services or log queries at the call centre. 

According to Business Day, the note on Twitter came after several city employees received the ransom note, which reads: "All your servers and data have been hacked. We have dozens of back doors inside your city. We have control of everything in your city. We also compromised all passwords and sensitive data such as finance and personal population information."

The hackers reportedly demand the payment of 4.0 bitcoins by October 28 at 17:00 failing which they will upload all the data on to the internet.

The hack reportedly occurred at the same time that several banks also reported internet problems believed to be related to cyber attacks.

Standard Bank tweeted: "You may be finding it difficult to log on to Internet banking and our Banking App at the moment. We're working to sort this out."

ABSA similarly tweeted: "We are aware of the ongoing intermittent issues with our digital channels and our technicians are working on a fix. We will let you know as soon as that is resolved and we're up and running again. Apologies for any inconvenience caused."

Both banks have since reported that the issues had been resolved. 

- Compiled by Riaan Grobler

We live in a world where facts and fiction get blurred
In times of uncertainty you need journalism you can trust. For only R75 per month, you have access to a world of in-depth analyses, investigative journalism, top opinions and a range of features. Journalism strengthens democracy. Invest in the future today.
Subscribe to News24
Lockdown For
DAYS
HRS
MINS
Voting Booth
Who do you think is going to win the 2020 US election?
Please select an option Oops! Something went wrong, please try again later.
Results
Biden is going to take it
46% - 4749 votes
It's four more years for Trump
54% - 5648 votes
Vote
ZAR/USD
16.52
(-0.11)
ZAR/GBP
21.39
(-0.23)
ZAR/EUR
19.45
(-0.53)
ZAR/AUD
11.68
(+0.29)
ZAR/JPY
0.16
(-0.06)
Gold
1903.13
(+0.15)
Silver
24.36
(+0.65)
Platinum
857.00
(-0.58)
Brent Crude
43.03
(0.00)
Palladium
2329.73
(+0.90)
All Share
55161.03
(+0.21)
Top 40
50741.94
(+0.09)
Financial 15
9977.80
(+3.10)
Industrial 25
74762.95
(-0.61)
Resource 10
54129.95
(-0.07)
All JSE data delayed by at least 15 minutes morningstar logo