GMO offers $1 million bounty after Desktop Cloud breach
Original title: Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Attackers demanded about $50 million after malware and customer data theft; trading logins were abused at brokers.
GMO Internet Group opened a bounty of up to $1 million on October 28 for tips that lead to arrest or an international wanted notice over the Onamae.com Desktop Cloud breach. GMO found malicious programs on customer servers on October 20, shut down every plan's servers on October 21, and later confirmed customer-information theft. OANDA Japan linked some unauthorized FX trades to logins it believes came from the service. A demanded ransomware launch was not confirmed.
Unconfirmed: GMO has not said how the attackers got in; their claims of a shared admin account and a service flaw are unverified.
- GMO counts 26,739 servers as potentially affected, not confirmed thefts.
- The program runs until an arrest, a wanted notice, or October 27, 2027.
- Payment requires identity proof and excludes people involved in the crime.
- FXTF told Desktop Cloud users to change passwords from a clean device.
- GMO has not confirmed impact on its other services.
Impact: Customer data and trading logins taken; some unauthorized FX trades
| Product | Affected |
|---|---|
| GMO Internet Onamae.com Desktop Cloud | — |
- 1.Change broker passwords from a device that never connected to Desktop Cloud.
- 2.Do not visit, repost or link to the attackers' site; scan if you already did.
- ATT&CK
- T1078 Valid Accounts
- Vendors
- GMO Internet Group
- Organizations
- FXTF
- Countries
- Japan
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | onamae.com | tal for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion d |
From the original article
6 min read at thehackernews.com
Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae. com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an arrest or an international wanted notice.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.