Onamae Desktop Cloud hacked; malware on up to 26,739 servers
Original title: Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
GMO shut down Desktop Cloud servers from 04:00 local time on October 21 and told customers to rotate stored secrets.
GMO Internet confirmed unauthorized access to Onamae.com Desktop Cloud, a Japanese VPS service, and said a third party installed malicious programs in some customer environments. The company said up to 26,739 customer servers may be affected and began shutting them down at 04:00 local time on October 21, with no restart date. Data stored on impacted servers may have been exposed, but GMO has not confirmed misuse or a leak, and says payment data sits on separate infrastructure. Customers who stored passwords or other secrets should rotate them and watch for phishing.
Unconfirmed: GMO has not confirmed that any exposed information was misused or leaked.
- Onamae.com is operated by GMO Internet, part of GMO Internet Group.
- Desktop Cloud is marketed for continuous MetaTrader 4 automated trading.
- All Desktop Cloud plans are interrupted, with no estimated restart.
- Credit card details are stored on different infrastructure and are not affected.
- GMO says it will not request passwords or card data by email or phone.
Impact: Malware on customer servers; stored data may be exposed
- 1.Rotate passwords and other secrets stored on affected servers.
- 2.Treat unexpected email or phone requests for passwords or card data as phishing.
- Vendors
- GMO Internet
- Products
- Onamae Desktop Cloud
- Organizations
- GMO Internet Group
- Countries
- Japan
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | onamae.com | me customers’ server environments,” reads the announcement. Onamae.com, operated by GMO Internet, a member of GMO Internet Group, |
From the original article
2 min read at bleepingcomputer.com
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.