Like any act of vandalism, Bitcoin industry experts and BitPesa as a company do not recommend paying this ransom.  Rather - hiring a security expert and installing tighter cyber-security controls are the solution.

If the ransom is paid, they will just do it again.  There should have been more stringent password policy and controls at UoN.

Just our humble opinion. Has anyone else experienced a hack like this?

On Thu, Jul 14, 2016 at 12:13 PM, Grace Githaiga via kictanet <kictanet@lists.kictanet.or.ke> wrote:
Someone has hacked the twitter handle for UoN https://twitter.com/ict_uonbi, and taken control of it. He has asked for 10BTC and posted the account where the BTC should be sent to.

The exchange rate is 1 bitcoin is USD 650 https://www.google.com/?gws_rd=ssl#q=10btc+to+%24

Then to demonstrate that this is not a joke,  the person(s) have started posting passwords for different systems and Emails accounts for UoN.

Not sure though if these are the real passwords or its just empty threats. 

It would be interesting to hear from experts.

Rgds
GG

Date: Thu, 14 Jul 2016 11:26:24 +0300
To: security@lists.my.co.ke
Subject: [Security Forum] UON hacked, ransomed
From: security@lists.my.co.ke

In other news,
https://twitter.com/ict_uonbi


_______________________________________________ Security mailing list Security@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/security

_______________________________________________
kictanet mailing list
kictanet@lists.kictanet.or.ke
https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/elizabeth%40bitpesa.co

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.



--
Elizabeth Rossiello
CEO and Co-Founder
BitPESA
Nigeria: +234 909 345 4135
Kenya: +254 710 891 851

Skype: erossiello