Japanese VPS provider Onamae Desktop Cloud halts service after hackers install malware ...

Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of virtual private server services in Japan, and installed malware on up to 26,739 customers’ servers.

The company confirmed on Oct. 20 that an unauthorized third party gained access to Onamae.com Desktop Cloud and installed malicious programs in some customers’ server environments. After detecting the intrusion, it began progressively shutting down customer servers at 4 a.m. local time on Oct. 21, 2026. The interruption affects all Desktop Cloud plans, and the company has given no estimated date for restarting the service.

The company said the breach may have exposed data stored on the affected servers, but it has not confirmed any instance of information being misused or leaked. It said payment information, such as credit card details, was not affected because it is stored on separate infrastructure. It said it will provide updates as the investigation continues.

The company advised customers who stored secrets, such as passwords, on their servers to rotate them as soon as possible because they may have been compromised. It also warned of an increased risk of phishing emails and other unsolicited communications from people trying to exploit the incident, and said it will never ask customers for a password or credit card information by email or phone.

Onamae Desktop Cloud is a cloud-based virtual private server and Windows virtual desktop service that gives users a persistent remote Windows desktop accessible over the internet from PCs, Macs, smartphones or tablets. Its Desktop Cloud byGMO service is advertised as ideal for stable foreign exchange automated trading, including continuous operation of the MetaTrader 4 platform.

The service is operated by GMO Internet, a member of GMO Internet Group, one of Japan’s leading internet infrastructure providers. Onamae.com, also operated by GMO Internet, is one of Japan’s largest domain registrars and provides web hosting, DNS and other internet infrastructure services.

Please take 30 seconds to register

Already have an account? Sign in

"If we think of usability and security as mutually exclusive - we have failed" - Jerrod Chong, Yubico

#teissLondon2018: On the internet, nobody knows you are a fridge

1 in 6 gamers disable all AV in the pursuit of the highest possible speeds

10 malicious Python Libraries discovered on PyPI Repository

126,000 affected by cyberattack on New Zealand patient portal Manage My Health

"If we think of usability and security as mutually exclusive - we have failed" - Jerrod Chong, Yubico

#teissLondon2018: On the internet, nobody knows you are a fridge

1 in 6 gamers disable all AV in the pursuit of the highest possible speeds

10 malicious Python Libraries discovered on PyPI Repository

126,000 affected by cyberattack on New Zealand patient portal Manage My Health

19-year-old claims he hacked into over 25 Tesla cars in 13 countries

2020 cybersecurity trends and resolutions

2025 in review: why cyber-security became a boardroom crisis

Trusting your AI agents

The blind spots in your stack - why fragmented data security fails

Securing the Hybrid Cloud Security in the AI era

Winston House, 3rd Floor, Units 306-309, 2-4 Dollis park, London, N3 1HF