Japanese Tech Giant GMO Hit by Major Cyberattack
Cyberattack and User Safety
Japanese technology conglomerate GMO Internet Group has been targeted by a significant cyberattack, forcing the company to issue an unprecedented recommendation to its users. The corporation, which operates in internet infrastructure, cybersecurity, and financial services, has instructed clients to fully shut down their computers, disconnect them from the internet, and even unplug network cables to protect themselves from potential viral threats.
The incident is linked to the company's Onamae.com Desktop Cloud service, which provides virtual private servers (VPS). This service is particularly popular among forex traders in Japan who utilize automated trading software. On October 20, the company acknowledged that hackers had successfully breached its systems and installed malicious software on approximately 26,739 servers.
Ransom Demands and Data Leaks
The attackers, whose identities remain unknown, demanded a $50 million ransom from the company. The hackers threatened to release user data if their demands were not met. GMO refused to pay the sum, resulting in the stolen information being leaked online.
Although the hackers also threatened to install ransomware on user devices, the company stated that no such incidents have been confirmed yet. However, the threat was significant: login credentials and account details for MetaTrader 4 and MetaTrader 5 platform users have been compromised. Some clients have already reported suspicious and unauthorized transactions on their accounts.
Compensation and Next Steps
GMO has apologized to those affected and offered each user $30 in compensation, regardless of whether they suffered specific financial loss. For those more severely impacted, the company is providing individual assistance, including the offer of new computer hardware. Additionally, GMO has warned the media and the public not to distribute the leaked data, stating that it will pursue legal action against those who do.
An investigation and analysis of the leaked information are currently underway to determine the exact number of victims. Traders and users are urged to immediately change their passwords and terminate all active sessions on their accounts. This incident serves as a stark reminder to both businesses and individuals of the critical importance of cybersecurity standards, especially when dealing with financial platforms.