Former Gautrain IT technician gets 10 years for using spyware to steal millions

Security officials looks on as the Gautrain leaves the Sandton station. (Phill Magakoe / AFP)
Security officials looks on as the Gautrain leaves the Sandton station. (Phill Magakoe / AFP)

The Johannesburg Specialised Commercial Crimes Court on Monday sentenced a former IT technician, Obakeng Israel Busang, who had been contracted to the Gautrain Management Agency (GMA), to an effective 10 years behind bars for the unlawful installation of spyware on GMA laptop and desktop computers.

Gautrain lost about R11 million after Busang hacked the IT systems and let outsiders access it with the intention of siphoning off funds from the organisation's account, IOL reported. He was arrested in 2014.

According to the National Prosecuting Authority (NPA), during the initial stages of the trial, Busang pleaded not guilty, but later changed his plea to guilty and made admissions in terms of Section 220 of the Criminal Procedure Act.

"This as he realised that evidence against him was overwhelming," the NPA said in a statement following the sentencing.

Convicted of 38 counts

Busang was convicted of 38 counts of contravening Section 86(4) of the Electronic Communications and Transactions Act, 2002.

The court grouped the offences according to the nature or type of spyware used.

He was sentenced to five years for each group of charges and the court ordered that some of the sentences on some counts should run concurrently, resulting in a sentence of 20 years in prison, half of which was suspended for a period of five years on condition that he is not found guilty of contravening any provisions of the Electronic Communications Transaction (ECT) Act.

READ | Alleged fraudster would have done more harm

"Busang was responsible for assisting employees with technical problems related to their laptops or desktops. He then used this opportunity, under false pretences that he was installing the latest software, to install spyware such as remote administration tools (RATs) and key loggers to overcome security measures designed to protect passwords and/or access codes to gain access to information from employees' laptops and desktops," NPA spokesperson Phindi Mjonondwane said.

READ | A SA govt Zoom briefing was just 'porn bombed' - here's how to make your chat safer


"Busang made a statement to the investigating officer in which he claimed he was recruited by someone at a car wash and requested to help the syndicate to obtain the login credentials of the persons who make payments to creditors of GMA. He stated that he was promised a reward if he could provide the login credentials of certain employees, but could not get the login credentials of both the CFO and the CEO.

"He then brought a laptop which had been doctored and connected it to the GMA system so that his partners in crime could access the login credentials of the top executives remotely. At the time he had already been informed that GMA would terminate his services on 31 October 2013." 

'Doctored' laptop

According to Mjonondwane, the head of IT realised that there were "irregularities" with the system and they decided to terminate his contract on 24 October 2013.

ALSO READ | Thousands of emails, passwords for groups like WHO dumped online

"Because the head of IT was next to him at all times when clearing his desk, he could not remove the doctored laptop. After vacating the building, he called his uncle who worked for GMA and asked him to remove the laptop and take it out of the building.

"The uncle thought the laptop belonged to GMA and took it to the assets manager. The assets manager called the head of IT who tried to operate it and realised that someone else was also operating it remotely. The head of IT figured that something was not right and they called IT security experts to help them.

READ | If you're planning to shop online in the foreseeable future, here's how to avoid cyber scams

"His actions resulted in GMA losing not less than R1.2 million to have the spyware removed and to replace some hard drives."

Senior State advocate Tilas Chabalala argued that each count carried a maximum sentence of five years' imprisonment.

He also said Busang was not a suitable candidate for correctional supervision because he previously disobeyed a court order to consult with a correctional officer who had been asked to compile a correctional report. 

The NPA welcomed the sentence.

We live in a world where facts and fiction get blurred
In times of uncertainty you need journalism you can trust. For only R75 per month, you have access to a world of in-depth analyses, investigative journalism, top opinions and a range of features. Journalism strengthens democracy. Invest in the future today.
Subscribe to News24
Lockdown For
Voting Booth
The 2021 Matric exams have been brought forward to avoid clashing with elections. This is:
Please select an option Oops! Something went wrong, please try again later.
A disaster - kids are stressed enough
44% - 756 votes
Not the best idea, but necessary
16% - 266 votes
No big deal, it's just a few days
40% - 691 votes
Rand - Dollar
Rand - Pound
Rand - Euro
Rand - Aus dollar
Rand - Yen
Brent Crude
Top 40
All Share
Resource 10
Industrial 25
Financial 15
All JSE data delayed by at least 15 minutes Iress logo
Editorial feedback and complaints

Contact the public editor with feedback for our journalists, complaints, queries or suggestions about articles on News24.