Japanese ISP GMO Internet has disclosed a significant security breach involving its Onamae.com Desktop Cloud service, which provides virtual Windows desktops intended specifically for foreign exchange trading applications. The breach allowed attackers to install malicious programs, compromise custom
Japanese ISP GMO Internet has disclosed a significant security breach involving its Onamae.com Desktop Cloud service, which provides virtual Windows desktops intended specifically for foreign exchange trading applications. The breach allowed attackers to install malicious programs, compromise customer trading accounts, and access sensitive information, prompting urgent responses from the company and its trading partners.
Security Vulnerabilities and Corporate Response
Unlike the rapidly evolving cybersecurity measures seen in similar international markets, GMO Internet acknowledged it had been slow to address reported vulnerabilities within its service. Although internal white-hat hackers had flagged security issues previously, the response prioritized service availability over swift remediation. This contrasted with more aggressive strategies by other providers that promptly patched vulnerabilities to avoid operational disruptions.
The aftereffects of the attack have been extensive: unauthorized trades conducted on accounts, suspension of active sessions by major trading platforms, and the exposure of nearly 27,000 VDI servers. While GMO has taken responsibility and committed to overhaul its infrastructure with external expert assistance, the incident exposes the challenges companies face in balancing security, uptime, and rapid threat mitigation. CEO Masatoshi Kumagai also underscored the growing complexity of cyberattacks fueled by accessible AI tools, urging public-private cooperation to bolster Japan’s cybersecurity framework.
Source: The Register
← All news
