Ransomware Attack Shuts Down City of Johannesburg's Systems

[correlate]

Level 18
Thread author
Verified
Top Poster
Well-known
Forum Veteran
May 4, 2019
792
9,574
1,670
New York
The City of Johannesburg municipality shut down the website, its e-services platform, and the billing system (SAP ISU and CRM) following a ransomware attack that also led to unauthorized information access according to a ransom note.
"The City of Johannesburg has detected a network breach which resulted in unauthorized access to its information systems," says an alert issued after the attack.
"The incident is currently being investigated by City of Joburg cybersecurity experts, who have taken immediate and appropriate actions to reinforce security measures and mitigate any potential impacts.
This incident comes after a previous ransomware attack from July that hit the South African electric utility City Power and encrypted all its systems, including applications and databases. City Power is owned by the city municipality and it one of the largest power suppliers in Johannesburg.
 
Computer security looks like a promising career,once again does anyone know of convictions and sentencing of culprits?
 
The cyberattack came from a group calling itself the Shadow Kill Hackers. Some media outlets are reporting it as a ransomware attack, but according to a note reportedly sent to city employees and shared on Twitter, the hackers didn’t encrypt data. Instead, they stole it and threatened to upload it to the internet if the City didn’t pay up. The note read : All your servers and data have been hacked. We have dozens of back doors inside your city. We have control of everything in your city. We also compromised all passwords and sensitive data such as finance and personal population information.
 
In the news I read regarding this on the webb, not even once do they mention what (non) security they had in place?
Anyone have that information?

/W
 

You may also like...