Ransomware Attack Shuts Down City of Johannesburg's Systems

[correlate]

Level 18
Thread author
Top Poster
Well-known
May 4, 2019
801
The City of Johannesburg municipality shut down the website, its e-services platform, and the billing system (SAP ISU and CRM) following a ransomware attack that also led to unauthorized information access according to a ransom note.
"The City of Johannesburg has detected a network breach which resulted in unauthorized access to its information systems," says an alert issued after the attack.
"The incident is currently being investigated by City of Joburg cybersecurity experts, who have taken immediate and appropriate actions to reinforce security measures and mitigate any potential impacts.
This incident comes after a previous ransomware attack from July that hit the South African electric utility City Power and encrypted all its systems, including applications and databases. City Power is owned by the city municipality and it one of the largest power suppliers in Johannesburg.
 

Dave Russo

Level 21
Verified
Top Poster
Well-known
May 26, 2014
1,052
Computer security looks like a promising career,once again does anyone know of convictions and sentencing of culprits?
 

upnorth

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Jul 27, 2015
5,459
The cyberattack came from a group calling itself the Shadow Kill Hackers. Some media outlets are reporting it as a ransomware attack, but according to a note reportedly sent to city employees and shared on Twitter, the hackers didn’t encrypt data. Instead, they stole it and threatened to upload it to the internet if the City didn’t pay up. The note read : All your servers and data have been hacked. We have dozens of back doors inside your city. We have control of everything in your city. We also compromised all passwords and sensitive data such as finance and personal population information.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top