Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
-
Hackers have compromised the infrastructure of Onamae Desktop Cloud, a widely used VPS provider in Japan, and deployed malware on as many as 26,739 customer servers, according to reporting from BleepingComputer.
The intrusion targeted the cloud platform's infrastructure rather than individual customer environments, which is why the impact scales across thousands of hosted servers. Details on the specific malware family, initial access vector, and timeline have not been fully disclosed in the available reporting, so administrators should treat any server hosted on the platform as potentially exposed.
At this stage, the key facts are:
- Affected service: Onamae Desktop Cloud (VPS hosting)
- Scale of impact: up to 26,739 customer servers with malware installed
- Attack vector: compromise of provider infrastructure
If your organization runs workloads on this provider, the practical priority is to treat hosted systems as untrusted until independently verified — rotate credentials and keys stored or used on those servers, review for unexpected processes, persistence mechanisms, and outbound connections, and rebuild from known-good images where compromise cannot be ruled out. Since the provider has not published detailed indicators of compromise in the reporting so far, detection efforts should lean on host-based hunting rather than relying on specific signatures.
Source: BleepingComputer
Do you or your organization host anything on Onamae Desktop Cloud, and if so, what steps are you taking to verify those servers are clean?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login