{"id":29966,"date":"2019-10-28T17:56:14","date_gmt":"2019-10-28T17:56:14","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/"},"modified":"2019-10-28T17:56:14","modified_gmt":"2019-10-28T17:56:14","slug":"city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/","title":{"rendered":"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals"},"content":{"rendered":"<div readability=\"30.146718146718\">\n<h2>Hayi wena! Jozi officials claim they&#8217;ll have 80% of systems back online as deadline expires<\/h2>\n<p> <img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2019\/10\/28\/funzela_ngobeni_johannesburg.jpg?x=442&amp;y=293&amp;crop=1\" alt=\"Funzela Ngobeni, a Johannesburg city councillor\" width=\"442\" height=\"293\" class=\"article_img\"><\/p>\n<p>Joburg finance chief Funzela Ngobeni<\/p>\n<\/div>\n<div id=\"body\" readability=\"109.31227651967\">\n<p>Several hours past the payment deadline, Johannesburg has vowed not to give in to criminal hackers who demanded \u00a329,000 (4 bitcoins) not to publish its data, four days after the South African city shut down its public sector networks in response to the breach.<\/p>\n<p>Several &#8220;customer facing systems \u2013 including the city&#8217;s website, e-services, and billing system[s]&#8221; \u2013 have remained offline <a target=\"_blank\" href=\"https:\/\/twitter.com\/CityofJoburgZA\/status\/1187476208872636416\" rel=\"noopener noreferrer\">since they were pulled down Thursday night<\/a> &#8220;as a precaution&#8221; after a &#8220;network intrusion&#8221;, which the city first announced just after 11pm local time on 24 October.<\/p>\n<p>In a statement issued this afternoon, city councillor Funzela Ngobeni said: &#8220;I can confirm that the city will not concede to their demands and we are confident that we will be able to restore systems to full functionality.&#8221;<\/p>\n<p>The ransom demand, for 4 bitcoins, expired at 17:00 local time (15:00 UTC) today.<\/p>\n<p>Ngobeni, the city&#8217;s elected finance chief, said that Joburg authorities had managed to switch on some of the city&#8217;s billing and CRM systems as well as various others, including library admin and land ownership databases.<\/p>\n<p>&#8220;I acknowledge the impact of this on our customers \u2013 specifically those who have joined our environmental drive to reduce paper usage by registering to receive their statement by email,&#8221; he added.<\/p>\n<p>As reported everywhere last week, a crew calling themselves Shadow Kill Hackers claimed responsibility for the hack, with a ransom note reportedly stating: &#8220;We have control of everything in your city. We also compromised all passwords and sensitive data such as finance and personal population information.&#8221;<\/p>\n<p>The hackers threatened to publish data they had stolen from the city&#8217;s systems unless their ransom demand was met.<\/p>\n<p>Matthew Aldridge, a senior solutions architect at Webroot, opined that the attackers were probably inexperienced in the arts of criminality, albeit technically skilled enough to break in and help themselves to other people&#8217;s data.<\/p>\n<p>He told <em>The Register<\/em>: &#8220;I do find it interesting that the attackers chose not to encrypt any of the City&#8217;s systems \u2013 that would give them a much stronger hand to play. As things stand, they are relying on having enough backdoors into the network to be sure that they can&#8217;t all be closed off before the City brings their systems back online. This could be a sign of an inexperienced or weak adversary.&#8221;<\/p>\n<p>Aldridge added: &#8220;The comment made by the City that they will be looking for a potential insider threat or disgruntled former employee as part of their investigation could also relate to this.&#8221;<\/p>\n<p>Authorities in Joburg, the largest city in South Africa*, also said they &#8220;know where the attack (hacker) comes from&#8221; as this article was being written, with 80 per cent of systems said to be coming back online by the end of the day.<\/p>\n<p>Infosec biz Emsisoft told <em>The Register<\/em> that the attack malware might have been custom-made, pointing to the personalised login screen (&#8220;quite unusual&#8221;, as the firm&#8217;s Brett Callow told us) and the fact that the email address in the <a target=\"_blank\" href=\"https:\/\/twitter.com\/pule_madumo\/status\/1187635928640167938\" rel=\"noopener noreferrer\">ransom note<\/a> wasn&#8217;t one they had seen being used elsewhere.<\/p>\n<p>Back in July, Joburg electricity company <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2019\/07\/25\/johannesburg_ransomware_infection\/\" rel=\"noopener noreferrer\">City Power was infected with ransomware<\/a> that prevented pre-paid meter customers from topping up online, potentially leaving locals in the dark. \u00ae<\/p>\n<p>* at 1,645 km<sup>\u00b2<\/sup>, it is slighter bigger than Greater London<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.co.uk\/tl\/1858\/-7802\/technical-overview-exasol-peek-under-the-hood?td=wptl1858\">Technical Overview: Exasol Peek Under the Hood<\/a><\/p>\n<\/div>\n<p>READ MORE <a href=\"http:\/\/go.theregister.com\/feed\/www.theregister.co.uk\/2019\/10\/28\/johannesburg_ransomware_payment_demand_refused\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hayi wena! Jozi officials claim they&#8217;ll have 80% of systems back online as deadline expires Several hours past the payment deadline, Johannesburg has vowed not to give in to criminal hackers who demanded \u00a329,000 (4 bitcoins) not to publish its data, four days after the South African city shut down its public sector networks in response to the breach.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":29967,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-29966","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-10-28T17:56:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"442\" \/>\n\t<meta property=\"og:image:height\" content=\"293\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals\",\"datePublished\":\"2019-10-28T17:56:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/\"},\"wordCount\":585,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/\",\"name\":\"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg\",\"datePublished\":\"2019-10-28T17:56:14+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg\",\"width\":442,\"height\":293},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/","og_locale":"en_US","og_type":"article","og_title":"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-10-28T17:56:14+00:00","og_image":[{"width":442,"height":293,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals","datePublished":"2019-10-28T17:56:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/"},"wordCount":585,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/","url":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/","name":"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg","datePublished":"2019-10-28T17:56:14+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals.jpg","width":442,"height":293},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/city-of-joburg-says-it-knows-who-ransom-hack-attacker-is-refuses-to-pay-off-criminals\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"City of Joburg says it knows who ransom hack attacker is, refuses to pay off criminals"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/29966","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=29966"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/29966\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/29967"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=29966"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=29966"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=29966"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}