Japan’s GMO Group has instructed customers to disconnect their computers from the internet and power them down following a cyberattack on its Onamae Desktop Cloud service. The breach, discovered on October 20, potentially affected nearly 27,000 customer servers and may have installed malware on affected systems. The attacker demanded a ransom of ¥8 billion ($50 million), which GMO refused to pay. The company confirmed that customer data had been stolen and published online, though payment information remained secure. MetaTrader trading credentials and account details were potentially compromised.
GMO worked with Trend Micro to address the threat while offering affected customers ¥5,000 ($30) in compensation and replacement PCs for those damaged by ransomware. The company scanned systems to detect remaining malware and pledged additional financial compensation for customers whose information was exposed. Despite threats to activate ransomware on customer machines, the attacker ultimately did not deploy the payload. GMO warned against sharing the leaked information and stated it would pursue legal action against those who disseminate it.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
