GMO Internet warns Desktop Cloud customers after ransomware threat
Original title: Japan’s GMO Internet Warns Customers to Unplug PCs as Hackers Threaten Ransomware
Attackers demanded about ¥8 billion after unauthorized access; GMO says no ransomware was confirmed by October 27.
Japan’s GMO Internet Group told Onamae.com Desktop Cloud customers to back up data, disconnect computers, shut them down, and unplug cables after suspected attackers threatened to publish information and launch ransomware at noon on October 27. GMO suspended the remote-desktop service on October 21 after unauthorized access and a ransom demand of about ¥8 billion, roughly $50 million. By 13:55 Japan time on October 27, GMO said no ransomware attack was confirmed. Suspected attackers had published material appearing to relate to the company and customers.
Unconfirmed: GMO has not confirmed encryption, and the published material is only described as appearing related to the company and customers.
- Reporting identified 26,739 potentially affected virtual desktop servers, not confirmed infections.
- Customers reported unauthorized activity in trading accounts.
- By 11:59 on October 27, completed device checks had found no malware.
- GMO said it would not pay and offered ¥5,000 plus reimbursement for unauthorized trading losses.
- Customers were told to use a separate device, end sessions, and enable multifactor authentication.
Impact: Unauthorized cloud access, extortion, and claimed customer data exposure
- 1.Back up important files while computers are disconnected from networks.
- 2.Change financial credentials from a separate device and enable multifactor authentication.
- 3.Avoid email or SMS links and ignore requests for passwords or authentication codes.
- Products
- Onamae.com Desktop Cloud
- Victims
- GMO Internet Group
- Countries
- Japan
From the original article
2 min read at gbhackers.com
Japan’s GMO Internet Group urged Onamae. com Desktop Cloud customers to back up their data, disconnect computers from networks, shut them down, and unplug connected cables after suspected attackers threatened to publish customer information and launch ransomware at noon on October 27. The emergency instructions followed unauthorized access to the company’s cloud desktop service and an […]
By Mayura Kathir · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.