GoKawiilGMO Internet tells customers to shut down PCs as ransomware threat materializes
GMO Internet Group has urged users of its Onamae Desktop Cloud VPS service to disconnect from the internet, power down their PCs, and unplug cables after attackers who breached the service followed through on threats to leak stolen data and trigger ransomware. The breach, first detected on October 20, may have affected up to 26,739 customer servers, exposing MetaTrader 4/5 trading credentials though not payment data. GMO says it refused the attacker's ¥8 billion ($50 million) ransom demand and is instead offering each affected customer ¥5,000 ($30) in compensation while working with Trend Micro on recovery.