GMO urges Onamae customers to shut down PCs over ransomware threat
Original title: Japan's GMO urges customers to shut down PCs amid ransomware threat
GMO says data was posted after an October 20 intrusion that may have hit 26,739 servers; it refused an ¥8 billion ransom and says encryption did not run.
GMO Internet told Onamae Desktop Cloud customers to disconnect and power off their PCs after an intruder threatened to launch ransomware planted during an October 20 breach. The company says company and customer data was later posted online, while payment data was not. It refused a ¥8 billion ransom and says the ransomware payload was not activated. Trend Micro is helping recovery, and GMO is still checking the leaked files.
Unconfirmed: GMO says the ransomware does not appear to have run, and it is still verifying the leaked data; exposure of trading credentials is described as possible.
- GMO detected the intrusion on October 20 and said malware may have reached 26,739 servers.
- The attacker demanded ¥8 billion, about $50 million, which GMO said it would not pay.
- GMO offered each customer ¥5,000 and is working with Trend Micro.
- Payment data was not exposed, but MetaTrader 4 and 5 credentials may have been.
- GMO says it is still verifying whether the published data is authentic.
Impact: Company and customer data published; trading credentials may be exposed.
| Product | Affected |
|---|---|
| GMO Internet Onamae Desktop Cloud | — |
- 1.Disconnect PCs from the network, shut them down, and unplug cables.
- 2.Reset MetaTrader 4 and MetaTrader 5 passwords and end active sessions.
- 3.Do not disseminate the exposed company or customer information.
- Vendors
- GMO Internet
- Victims
- GMO Internet
- Organizations
- Trend Micro
- Countries
- Japan
From the original article
2 min read at bleepingcomputer.com
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.