Hackers briefly disabled and defaced the official website of Kenyan President William Ruto on July 18, demanding a ransom of five bitcoin (BTC) and threatening to leak unspecified data if payment was not made. Authorities in Kenya have opened an investigation into the breach.
Incident Overview
The presidential website was taken offline for a short period on July 18 after being compromised by attackers, who also posted defacements. The perpetrators warned they would publish undisclosed information unless their ransom demand was met. It was not immediately clear whether any sensitive data was accessed or exfiltrated.
Ransom Demand in Bitcoin
The attackers demanded five bitcoin, a common payment method in cyber extortion due to the cryptocurrency’s liquidity and pseudonymous transactions. As of publication, there was no indication that a ransom had been paid, and officials had not provided details on any data exposure.
Government Response
Kenyan authorities said they are investigating the incident and working to strengthen protections around government digital assets. The presidential website was restored after the disruption.
Why It Matters
Ransomware and website defacement campaigns targeting public-sector infrastructure continue to highlight cybersecurity risks for high-profile government domains. The use of cryptocurrency in extortion schemes remains a focal point for law enforcement and policymakers seeking to balance digital innovation with crime prevention.