GoKawiilGMO's Onamae Desktop Cloud breached, up to 26,739 servers hit by malware
GMO Internet Group confirmed that attackers gained unauthorized access to its Onamae.com Desktop Cloud VPS service and installed malicious programs on nearly 27,000 customer server environments. The company began shutting down affected servers on October 21, 2026, taking all Desktop Cloud plans offline with no restoration date given. GMO says payment data was stored separately and wasn't affected, but customer-stored data may have been exposed.
GoKawiil's interpretation of the reporting above, not reported fact.
The service is marketed for automated FX trading setups like MetaTrader 4, meaning financial traders relying on continuous server uptime could face disrupted operations during the outage. GMO's warning about rotating passwords and watching for phishing suggests the incident could lead to secondary attacks exploiting affected customers' trust and urgency.
- Up to 26,739 Onamae Desktop Cloud VPS instances were compromised with malware.
- All Desktop Cloud plans are offline since October 21, 2026, with no restart date announced.
- Customers are urged to rotate stored passwords and stay alert for phishing attempts.
YubiKey 5C NFC Security Key — With server breaches like the Onamae Desktop Cloud hack highlighting how easily credentials and admin access can be compromised, hardware-based two-factor authentication is a smart safeguard. A YubiKey adds a physical layer of security to your cloud and hosting accounts that malware and remote attackers can't easily bypass. It's a practical step toward protecting your infrastructure logins from the kind of unauthorized access described in this incident.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-21
Published there as: “Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.