GMO tells Onamae.com users to shut down PCs after extortion threat
Original title: Japan’s GMO Internet Urges Customers to Shut Down PCs After Hackers Threaten Ransomware Attack
Attackers demanded about ¥8 billion; alleged data appeared online, but GMO has not confirmed ransomware.
Japan’s GMO Internet told Onamae.com Desktop Cloud customers to disconnect PCs, shut them down and unplug cables after a threatened ransomware attack. Malicious programs were confirmed in some customer server environments on October 20, and 26,739 servers were identified as potentially affected, with shutdowns starting October 21. Attackers demanded about ¥8 billion, which GMO refused. Alleged company and customer information appeared online at 12:30 p.m. on October 27; a 1:55 p.m. update said ransomware was not confirmed.
Unconfirmed: Ransomware was not confirmed, published material was still being checked, and 26,739 is a potential server count, not a verified victim total.
- The ransom threat set noon Japan Standard Time on October 27 for publication and ransomware.
- GMO received the email on October 21 and consulted police the next day.
- No malware was found on devices whose analysis finished by 11:59 a.m.
- No ransomware family, hashes, domains or exploited CVE were published.
- Verified ransomware damage was tied to a ¥5,000 payment and replacement PCs.
Impact: Server data may have been viewed; alleged information was published
- 1.Disconnect Desktop Cloud PCs, shut them down and unplug connected cables.
- 2.Change credentials stored or used on affected servers, including reused passwords.
- 3.Ignore messages that request passwords or offer paid recovery.
- Products
- Onamae.com Desktop Cloud
- Victims
- GMO Internet
- Organizations
- Trend Micro
- Countries
- Japan
From the original article
3 min read at cybersecuritynews.com
Japan’s GMO Internet urged customers of its Onamae. com Desktop Cloud service to disconnect their PCs, shut them down, and unplug connected cables after suspected attackers threatened a ransomware attack. The warning followed a breach involving malicious programs on customer servers and an extortion demand of approximately ¥8 billion.
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.