日本互联网企业GMO Internet目前正对其旗下Onamae云桌面服务遭受未经授权访问的数据泄露事件展开调查 1。该服务主要向金融交易员提供虚拟化桌面环境，此次攻击可能导致约27,000台服务器受到破坏影响 1。在事件发生初期，即10月21日，GMO关闭了相关服务并收到了勒索邮件，黑客通过电子邮件要求支付约80亿日元（约合5000万美元）的赎金 1。随后在10月27日，公司方面表示疑似攻击者已在网络上发布了窃取的客户及业务信息 1。针对这一安全危机，GMO已建议受影响客户重置密码以保障账户安全 1。
值得注意的是，本次数据泄露事件发生在GMO网络安全部门报告发现使用中国AI渗透测试工具Artex进行攻击的证据一周后 1。尽管此前有报道称日本金融服务局（FSA）于5月发布指南敦促金融机构加强基本防御 1，但官方尚未确认本次Onamae服务泄露事件与之前发现的Artex工具攻击之间存在关联 1。
Japanese internet giant GMO Internet is investigating a data breach involving unauthorized access to its Onamae cloud desktop service, which provides virtualized desktops primarily to financial traders. 1 The incident came to light on October 21 when the company suspended the service after receiving an email from hackers demanding a ransom of approximately 8 billion yen, equivalent to around $50 million. 1 By October 27, GMO reported that suspected attackers had begun posting stolen customer and business information online. 1
The scope of the potential compromise remains under review, with estimates suggesting that up to 27,000 servers may have been affected by the unauthorized access. 1 In response to the leak, the company has advised all customers to reset their passwords immediately. 1 This security failure occurs just one week after GMO’s cybersecurity division identified evidence that Chinese AI-based penetration testing tool Artex was being used in attacks against Japanese firms; however, officials have not yet confirmed any connection between the two incidents. 1 Regulatory context for this event includes guidance issued by Japan’s Financial Services Agency in May, which urged financial institutions to strengthen basic defensive measures. 1
评论
还没有评论，欢迎留下第一条。