GMO Internet Ransomware Crisis: Users Told to Unplug
Hackers who breached GMO Internet threatened to detonate ransomware on customers' PCs after GMO refused to pay a $50M ransom, prompting the company to urge users to physically disconnect before noon.
What we know
GMO Internet called for computers to be disconnected amid a looming cyberattack after refusing a $50M ransom demand. Hackers claimed to have planted ransomware covertly on customer machines via the cloud. An account on X flagged the same story saying 'the internet is breaking.' The incident highlights escalating ransomware tactics targeting cloud infrastructure.
How the story developed
Hackers who breached GMO Internet threatened to detonate ransomware on customers' PCs after GMO refused to pay a $50M ransom, prompting the company to urge users to physically disconnect before noon.
Hackers installed malware on up to 26,739 servers run by GMO Internet's Onamae Desktop cloud service, primarily used by automated forex trading bots.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.