Onamae shuts Desktop Cloud after malware on customer servers
Original title: Hackers Planted Malware on Japanese Cloud Servers, Forcing the Provider to Shut Down Its Service
The provider lists 26,739 servers as potentially affected and has not set a restart date.
Japan’s Onamae.com confirmed on October 20, 2026, that malware was in some Desktop Cloud customer server environments and began stopping servers at 4:00 a.m. Japan time on October 21. The shutdown covers every plan, not only hosts where malware was confirmed, and no restart date was given. Onamae warned that data inside those systems may have been viewed, but it has not named the malware, the entry point, or any attacker. It says it found no confirmed leak of customer personal information it holds and does not store payment card data.
Unconfirmed: How the attackers got in, what the malware does, and whether any data was stolen are not established.
- The 26,739 figure is possible scope, not a confirmed infection count.
- Customers were told to change authentication data stored or used on the servers.
- Onamae says it will not ask for passwords or card data by email or phone.
- No hashes, filenames, attacker addresses, or malware family were published.
- The company has not said whether data was copied off the servers.
Impact: Malware on rented servers; stored data may have been viewed
| Product | Affected |
|---|---|
| Onamae.com Desktop Cloud | all service plans |
- 1.Change authentication information stored or used on the affected servers.
- 2.Change matching passwords on other services.
- 3.Ignore emails or calls that request passwords or credit card details.
- Vendors
- Onamae.com
- Products
- Desktop Cloud
- Countries
- Japan
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | onamae.com | planted malware in customer server environments at Japan’s Onamae.com Desktop Cloud, prompting the provider to begin shutting dow |
From the original article
3 min read at cybersecuritynews.com
Hackers planted malware in customer server environments at Japan’s Onamae. com Desktop Cloud, prompting the provider to begin shutting down servers across every service plan. The company listed 26,739 servers as potentially affected, raising concerns about stored data and login details.
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.