South African Government Hacked

Multiple confirmed reports of scams and criminal activity originating from the Department of Justice has been received, verified and confirmed.

More technical information below this report.

Recipients received the following from the Department of Justice email SERVERS (more than one):

+++++++++++++++++++++++++++++++++++++++

Hi

I wish to let you know that as you read this, I have already infected your computer with a trojan and now have your private info out of your operating system.

It previously was installed on an adult web page after which you’ve selected the Data clip, my software instantly got into your computer as it was programmed to be. Then, your camera started to record you slowly, on top of that I caught a vid that you have seen.

Just after a little while it also picked up all your social contact info. If you ever wish us to wipe out all your details that we have got, you shall give us 1,240
Euro in bitcoin it’s a crypto. Here is my BTC account transfer address – ***CHANGED/EDITED***

Now you will have 24hrs (only) to make that payment. The moment I have received the transaction confirmation, I’m going to wipe out all the DATA CLIPS I have got from your Device and everything completely. Otherwise, be reassured that the evidence will be sent to all of your contacts within the press of a button.

+++++++++++++++++++++++++++++++++++++++

host 41.149.76.145
145.76.149.41.in-addr.arpa domain name pointer mail1.justice.gov.za.
>>host mail1.justice.gov.za
mail1.justice.gov.za has address 41.149.76.145

Return-path: <*****@justice.gov.za>
Envelope-to: victim@******
Delivery-date: Sun, 11 Nov 2018 23:45:32 +0200
Received: from mail2.justice.gov.za ([41.149.76.146]:40466)
by *****.co.za with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.91) (envelope-from <******@justice.gov.za>)
id 1gLxXu-0002GY-2T