Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

highlivepartial fix

GMO Onamae Desktop Cloud malware on customer VPS

› Onamae Desktop Cloud (GMO Internet)

Get an email when a new major security incident drops. No spam, unsubscribe any time.

started
Oct 20, 2026
closed
ongoing
CVEs
none
sources
1

## summary

GMO Internet’s Japanese VPS service Onamae Desktop Cloud said an attacker installed malicious programs in customer environments, forcing shutdown of as many as ~26,739 servers with no immediate restart date (mid-October 2026 reporting).

severity: Provider compromise

## affected

  • Customer VPS environments during compromise

## fixed in

no fixed release yet

## news & write-ups[1]

## notes & caveats

Verify primary vendor advisory for exact fixed versions; facts taken from public sources listed in links.