Japan’s GMO Internet Urges Customers to Shut Down PCs After Hackers Threaten Ransomware Attack
GMO Internet urges customers to shut down PCs after hackers threaten ransomware attack and leak data.
Japan's GMO Internet is urging customers of its Onamae.com Desktop Cloud service to shut down their PCs due to a potential ransomware attack. This follows a breach where malicious programs were found on customer servers, leading to an extortion demand of approximately ¥8 billion and the subsequent publication of some company and customer information. While no ransomware attack has been confirmed, GMO is investigating customer devices and advising users to back up data and disconnect network connections as a precaution.
AI summary of the linked source. Not reviewed by an editor. How this works
Run GMO Internet?
Get an email when a new story names GMO Internet, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonGMO Internet's Onamae.com Desktop Cloud service was compromised after malicious programs were discovered on customer servers, resulting in an extortion demand of roughly ¥8 billion and the partial exposure of company and customer data. The incident highlights the critical danger of shared cloud environments where a breach in one area can rapidly propagate to customer-facing infrastructure. The reactive nature of GMO's response — urging customers to shut down PCs and disconnect networks only after the threat was identified — underscores the need for proactive containment strategies. When ransomware actors gain a foothold in a managed service environment, the blast radius extends far beyond the provider, putting every customer's data and operations at risk.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — ransomware