{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T17:37:12.278Z",
  "tag": {
    "id": "gmo",
    "label": "GMO",
    "isStack": false,
    "url": "https://pwn.watch/t/gmo",
    "feed": "https://pwn.watch/t/gmo/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 1,
    "notFullyPatched": 1,
    "patched": 0
  },
  "incidents": [
    {
      "slug": "onamae-desktop-cloud-malware-oct",
      "title": "GMO Onamae Desktop Cloud malware on customer VPS",
      "url": "https://pwn.watch/i/onamae-desktop-cloud-malware-oct",
      "json": "https://pwn.watch/i/onamae-desktop-cloud-malware-oct.json",
      "status": "live",
      "severity": "high",
      "patchStatus": "partial",
      "product": "Onamae Desktop Cloud (GMO Internet)",
      "tags": [
        "gmo"
      ],
      "cveIds": [],
      "affectedVersions": [
        "Customer VPS environments during compromise"
      ],
      "fixedVersions": [],
      "startedAt": "2026-10-20",
      "closedAt": null,
      "updatedAt": "2026-10-20",
      "summary": "GMO Internet’s Japanese VPS service Onamae Desktop Cloud said an attacker installed malicious programs in customer environments, forcing shutdown of as many as ~26,739 servers with no immediate restart date (mid-October 2026 reporting).",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": []
}