South African Railways Lost Over $1M in Phishing Scam

PRASA reported a phishing attack that led to the theft of approximately R30.6 million (~US$1.6M), of which about R15.7 million has been recovered; the matter remains under police investigation. The agency disclosed few technical details, but commentators suspect insider-enabled fraud (ghost email accounts) or email interception; the article also notes increasing digital banking fraud in South Africa and broader cyber risks to rail systems such as ransomware and IoT vulnerabilities.