The City of Johannesburg municipality shut down its website, e-services platform, and the billing system (SAP ISU and CRM) following a ransomware attack that also led to unauthorized information access. Attackers who call themselves the Shadow Kill Hackers are asking for four bitcoins (around $30,493) in their ransom note to be paid until October 28. The municipality says it will not pay the ransom and that it will attempt to restore systems to full functionality on its own. This comes after a previous ransomware attack from July that hit the South African electric utility City Power and encrypted all its systems.
Source: https://www.bleepingcomputer.com/news/security/ransomware-attack-shuts-down-city-of-johannesburgs-systems/