Remote access settings, virtual private servers emerge as blind spots in security

A cyberattack recently struck the virtual desktop infrastructure of Japanese technology conglomerate GMO Internet. Specifically, adversaries exploited an elementary configuration oversight within the firm's cloud environment. Because executives declined initial extortion payouts, the attackers began publishing stolen customer archives online. Consequently, the syndicate leaked proprietary operational details alongside personal subscriber records. Extortion Demands Plunge to One Million Dollars Surprisingly, the extortionists altered their financial ultimatums after the initial deadline expired.

A cyberattack recently struck the virtual desktop infrastructure of Japanese technology conglomerate GMO Internet. Specifically, adversaries exploited an elementary configuration oversight within the firm's cloud environment. Because executives declined initial extortion payouts, the attackers began publishing stolen customer archives online. Consequently, the syndicate leaked proprietary operational details alongside personal subscriber records. Extortion Demands Plunge to One Million Dollars Surprisingly, the extortionists altered their financial ultimatums after the initial deadline expired.

GMO Internet has revealed that there was unauthorized access to its servers for automated FX currency margin trading.

Japanese technology giant GMO Internet issued an unprecedented emergency advisory to its subscribers. Specifically, the corporation urged clients to disconnect desktop computers, sever internet connections, and unplug power cables immediately. This drastic warning followed an extortion ultimatum from cybercriminals who breached the provider's hosting infrastructure. The syndicate threatened to deploy devastating file-encrypting malware while publishing confidential client records simultaneously. Consequently, the firm initiated emergency protocols across its Japanese operations.

Japanese technology giant GMO Internet issued an unprecedented emergency advisory to its subscribers. Specifically, the corporation urged clients to disconnect desktop computers, sever internet connections, and unplug power cables immediately. This drastic warning followed an extortion ultimatum from cybercriminals who breached the provider's hosting infrastructure. The syndicate threatened to deploy devastating file-encrypting malware while publishing confidential client records simultaneously. Consequently, the firm initiated emergency protocols across its Japanese operations.

The Onamae Desktop Cloud Breach Sparks Grave Financial Concerns The recent breach of cloud-based desktop environments has culminated in a massive influx of complaints regarding unauthorized financial transactions. The prominent Japanese enterprise, GMO Internet, officially confirmed the infiltration of its Onamae.com Desktop Cloud platform. The company formally acknowledged the illicit exfiltration of user data beyond the service's secure perimeters. Following the catastrophic incursion, several clients reported anomalous activities across their brokerage and foreign exchange accounts.

GMO Internet said on the 20th of October 2026 that an attacker put harmful programs on its Onamae.com Desktop Cloud, where up to 26,739 servers may be affected. The service will not come back on the old system.

Japanese technology conglomerate GMO Internet Group suffered a catastrophic security compromise across its virtual workspace infrastructure. Specifically, the GMO Desktop Cloud breach impacted over 26,000 servers dedicated to foreign exchange trading. Consequently, cybercriminals exfiltrated sensitive client records and initiated unauthorized financial transactions across user accounts. In response, corporate leadership suspended operations immediately to prevent further damage. Severe Active Directory and RDP Misconfigurations…

BleepingComputer, publié le 21 octobre 2026. L'incident concerne Onamae Desktop Cloud, un service de VPS (Virtual Private Server) opéré par GMO Internet, l'un des plus grands registrars de noms de domaine au Japon, membre du groupe GMO Internet. Un accès non autorisé par un tiers a été confirmé par la société le 20 octobre 2026.