GMO Cloud desktop subject to unauthorized access; extortionists demand BTC/ETH and the company refuses to pay

Article

Japanese internet giant attacked, hackers demand Bitcoin ransom, company head refuses to pay

BlockBeats reports,October 28, according to Nada News, the Japanese internet giant GMO Group's cloud desktop service was subject to unauthorized access, potentially affecting as many as servers. 26,739 The hackers explicitly demanded in the ransom letter that payment be made in BTC and ETH, claiming that GMO-owned crypto exchange could prepare the funds immediately, and threatening continued abnormal transactions in the victim accounts and the public disclosure of user data. The ransom demand was initially 50000000 USD, then reduced to 1000000 USD。

GMO Group representative Masatoshi Kumagai clearly stated that he would not compromise and that no payment had been made. Its crypto exchange,GMO Coin, also confirmed that no abnormal activity had been found in customer accounts. Although the hackers subsequently published some of the data and threatened to update it daily, the domain hosting the leaked information was shut down in the early morning of October 28.

Original link https://m.theblockbeats.info/flash/374171

Key points

GMO Group's cloud desktop service was subject to unauthorized access, potentially affecting as many as 26,739 servers.
The hackers demanded payment in BTC and ETH as ransom, with the amount reduced from 50000000 USD to 1000000 USD。
GMO Group representative Masatoshi Kumagai said that he would not compromise and that no payment had been made.
GMO Coin confirmed that no abnormal activity had been found in customer accounts.
The hackers published some of the data and threatened to update it daily, but the relevant website domain was shut down in the early morning of October 28.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

This was a cloud desktop service security incident. The hackers demanded a cryptocurrency ransom and threatened to disclose data, while the GMO Group said it would not pay.

Why it matters to readers

The incident involves potentially affected servers, threats to disclose data, and whether GMO Coin customer accounts were abnormal.

It indicates that a cyberattack may simultaneously involve system access, the threat of data leakage, and cryptocurrency extortion.

Risks and unknowns

26,739 refers to the number of potentially affected servers; the actual scope of impact remains unclear.
The specific content of the data disclosed and whether it contains user data remain unclear.
The hackers' claims regarding abnormal transactions and continued updates have not yet been fully confirmed.
There is currently no evidence that GMO has paid the ransom.

GMO Cloud desktop subject to unauthorized access; extortionists demand BTC/ETH and the company refuses to pay

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center