Yaponiyaning Onamae Desktop Cloud tizimi buzib kirildi, 27 000 tagacha server ta'sirlandi
Bill Toulas
2026-yil 21-oktabr
05:43
0
Xakerlar Yaponiyada mashhur VPS xizmatlari provayderi bo'lgan Onamae Desktop Cloud infratuzilmasini buzib kirishdi va 26 739 tagacha mijoz serveriga zararli dastur o'rnatishdi.
Kompaniya 20-oktabrda tasdiqladiki, ruxsatsiz uchinchi tomon ba'zi mijoz muhitlarida "zararli dasturlar" o'rnatgan.
Buzib kirishni aniqlagandan so'ng, kompaniya 2026-yil 21-oktabr, mahalliy vaqt bilan 04:00 dan boshlab mijoz serverlarini bosqichma-bosqich o'chirishni boshlaganini aytadi.
"Onamae.com Desktop Cloud tizimiga uchinchi tomon tomonidan ruxsatsiz kirish sodir bo'lganini va ba'zi mijozlarning server muhitlarida ruxsatsiz dasturlar o'rnatilganini tasdiqladik," — deb yoziladi e'londa.
GMO Internet Group a'zosi bo'lgan GMO Internet tomonidan boshqariladigan Onamae.com Yaponiyaning eng yirik domen registratorlaridan biri bo'lib, shuningdek veb-xosting, DNS va boshqa internet infratuzilma xizmatlarini taqdim etadi.
Uning byGMO Desktop Cloud xizmati "MetaTrader 4 (MT4) doimiy ishlashini o'z ichiga olgan barqaror FX avtomatlashtirilgan savdo uchun ideal" deb reklama qilinadi.
Ogohlantirishga ko'ra, buzib kirish ta'sirlangan serverlarda saqlangan ma'lumotlarni fosh qilishi mumkin. Biroq, kompaniya ma'lumotlar noto'g'ri ishlatilgani yoki sizib chiqqanini tasdiqlamagan.
Kompaniya shuningdek, kredit karta ma'lumotlari kabi to'lov ma'lumotlari ta'sirlanmaganini ta'kidlaydi, chunki ular boshqa infratuzilmada saqlanadi.
Tergov davom etar ekan va ko'proq tafsilotlar ma'lum bo'lar ekan, GMO yangilanishlar taqdim etishini aytadi.
Kompaniya bugun mahalliy vaqt bilan soat 4:00 dan boshlab xizmat to'xtatilishini e'lon qildi va barcha Desktop Cloud rejalariga ta'sir qilinishini ta'kidladi. Xizmatni qayta ishga tushirish uchun taxminiy sana berilmagan.
Serverlarida parollar kabi maxfiy ma'lumotlarni saqlagan mijozlarga ularni iloji boricha tezroq almashtirish tavsiya etiladi, chunki ular buzib kirilgan bo'lishi mumkin.
Kompaniya shuningdek, fishing elektron pochta xabarlari va boshqa so'ralmagan aloqalar xavfi ortganini ta'kidladi, chunki tahdidchilar mijozlarni maxfiy ma'lumotlarni oshkor qilishga ishontirish uchun ushbu hodisadan foydalanishga urinishi mumkin.
"Biz sizdan hech qachon elektron pochta yoki telefon orqali parolingiz yoki kredit karta ma'lumotingizni so'ramaymiz," — deb aytadi kompaniya.
Hujumchilar haqiqiy ma'lumotlarga ega bo'lgach, ularning harakatlarining faqat 37 foizi bloklanadi
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalangach, oldini olish keskin pasayadi.
Blue Report 2026 mijozlarning ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha texnikani texnika bo'yicha himoya choralarini o'lchaydi.
Hisobotni oling
Bog'liq maqolalar:
Nippon Columbia zararli dastur hodisasi 8,6 million karaoke muxlislarining yozuvlarini fosh qildi
Lazarus xakerlari zararli dastur yetkazib berish uchun post-kvant kriptografiyasidan foydalanadi
ClickFix hech qachon bu qadar katta bo'lmagan va AI vositalari uning eng ishonchli jozibasi
Zeabur ikki oy ichida ikkinchi xavfsizlik buzilishidan so'ng yopilmoqda
OVHcloud CLI GitHub'da ishlab chiquvchilar maxfiy ma'lumotlarini o'g'irlash uchun orqa eshik bilan chiqarildi
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
By Bill Toulas
October 21, 2026
05:43 PM
0
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.
The company confirmed on October 20 that an unauthorized third party installed "malicious programs" in some customer environments.
After detecting the intrusion, the company says it progressively shut down customer servers beginning at 04:00 local time on October 21, 2026.
“We have confirmed that unauthorized access by a third party occurred against Onamae.com Desktop Cloud and that unauthorized programs were installed in some customers’ server environments,” reads the announcement.
Onamae.com, operated by GMO Internet, a member of GMO Internet Group, is one of Japan’s largest domain registrars and also provides web hosting, DNS, and other internet infrastructure services.
Its Desktop Cloud byGMO service is advertised as "ideal for stable FX automated trading, including continuous operation of MetaTrader 4 (MT4)."
According to the alert, the breach may have exposed data stored on the impacted servers. However, the company has not confirmed any instance of information being misused or leaked.
The company also emphasizes that payment information, such as credit card details, is not affected because it is stored on a different infrastructure.
As the investigation continues and more details become available, GMO says it will provide updates.
The company announced a service interruption starting today at 4 a.m. (local time), noting that all Desktop Cloud plans will be impacted. No estimated date has been provided for restarting the service.
Customers who stored secrets, such as passwords, on their servers are advised to rotate them as soon as possible, as they may have been compromised.
The company also noted an increased risk of phishing emails and other unsolicited communications, as threat actors may try to exploit the incident to convince customers to disclose sensitive information.
“We will never ask you for your password or credit card information via email or phone,” the company says.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report
Related Articles:
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
Lazarus hackers use post-quantum cryptography for malware delivery
ClickFix has never been bigger, and AI tools are its most convincing lure yet
Zeabur shutting down after second security breach in two months
OVHcloud CLI releases backdoored on GitHub to steal developer secrets