Malicious program planted on GMO Onamae.com Desktop Cloud servers; trading account logins on up to 27,000 servers may have been stolen and abused

GMO Internet said that on October 20 it confirmed a third party had planted a malicious program on some customer servers of its Onamae.com Desktop Cloud service, that trading account login details stored on the servers may have been taken and abused, and that it began shutting down all plans from early October 21, with 26,739 servers potentially affected ^[1]. From October 21 customers reported unfamiliar activity on trading accounts; the company has gone to the police and launched a bounty of up to US$1 million for information ^[1][3]. Users who stored or used IDs and passwords on the servers should change them now, along with the same passwords on other services, and beware of phishing emails exploiting the incident ^[2].

Industries mainly affected: Finance, Technology

1. Change every ID and password stored or used on the server, including trading accounts, immediately ^[2].
2. Change the same passwords on other services .