From our other sites
The story
GMO was reportedly hit by an unauthorized access incident and asked customers to “disconnect your PC from the network, power it down, and unplug the cables as well.” On 5ch, the debate wasn’t so much about the response itself — it was the president’s press conference, held under dim lighting, that got mocked as “like a movie set” and “this guy’s watched too many dramas.” On top of that, some pointed out that data apparently showing customers’ browsing history had leaked, and that the hackers themselves had reportedly called on GMO to “keep the RDP logs, since they’ll be evidence in lawsuits” — sparking discussion about the company’s slow response and the prospects for a future class-action suit.
■ Request to disconnect and power down customers’ PCs
After backing up your data, please disconnect from the network, power down your PC, and unplug any cables connected to it.
Source: news.jp / Original article here
What people said
ps://i.imgur.com/u8W347C.jpeg
ps://i.imgur.com/NPFduqI.jpeg
ps://i.imgur.com/Hy7aq6l.jpeg
ps://i.imgur.com/WFC1SKO.jpeg
GMO opens cyberattack 'analysis and defense' hub — 200 white-hat hackers gather
https://news.ntv.co.jp/category/economy/8da5a651ef064cb186551a1fc1cc68be
I mean, bright lighting would look lame, lol😅
This is already only slightly dim, lol
This president's watched way too many dramas
Why's it so staged? This isn't an esports tournament
they don't even know when it'll end — are they really gonna keep the power off the whole time?
Leave it off for like 100 years and it'll probably be safe
It's so dim my eyes are gonna start floating around
Lol
There's literally no point dimming the lights
But that's gonna cause problems
Also, even after backing up, you can't touch that backup without confirming it's safe
They're about to inspect the PCs one by one
But is there really any point unplugging the mouse and video cables too?
Maybe it's about the uninterruptible power supply?
Laptops have batteries built in, after all
It could still be connected to the net, so yeah, it's necessary
there could be a trojan lurking in there
If anything, making a backup might be the more dangerous move
Why were they running with zero defenses even after getting hacked?
Because upper management is incompetent
Gotta wrap yourself in aluminum foil too
My condolences
GMO customers' browsing history is apparently circulating, and it probably picked up the email addresses of family and acquaintances too — nobody wants that exposed to everyone, right?
Gotta wrap the whole house in aluminum foil too😤
Then your phone won't get signal😭
Me: please unplug the power now
Them: unplugged the power (what they assumed was the power)
Me: what do the lights look like?
Them: one's lit up green and a few are blinking green
Me: '…I see, okay let's unplug some more then'
Guess they just have to make them unplug everything
That's confusing…
Paying the hackers 150 million yen is a straight 150 million loss, but compensating customers is something they can skip unless they get sued
So in the end, it minimizes the damage to the company's finances
They're trying to block the class-action lawsuit too
Except the hackers already beat them to it
GMO: 'Please delete the RDP data (the data with traces left behind)'
↓
Hackers: 'Please keep the RDP data safe and don't delete it — it's important evidence for things like class-action lawsuits'
Honestly, it's embarrassing
Having the president personally lead the hacking response using an IA (information security/incident response team)
isn't something you see every day
This is standard everywhere in the world
Once it's beyond what the user side can handle, disconnecting the network and cutting the power is the strongest defense
US government agencies basically do this too
'Go fully offline' is the golden rule
For a company that markets itself on security
to go 7 whole years
without noticing a security hole is pretty damning
https://imgur.com/Lae3zlw.jpeg
That's surprising
Wait, I thought it'd be something more — they just put out a message?
Maybe they're just not connected to the internet?
Background and key points of this discussion
The request to “disconnect from the network and power down” is a standard first-response measure for unauthorized access incidents, aimed at physically stopping the spread of infection and any ongoing data leaks. While the thread mostly mocked the lighting and staging at the press conference, the real issues lie elsewhere. GMO reportedly failed to notice the vulnerability for a long period, and the hackers themselves are said to have called for the leaked trace data (RDP logs) to be kept rather than deleted, since it would serve as “evidence for a class-action lawsuit” — drawing attention to the company’s slow response and the direction any future litigation might take. Note that regarding the leak of customers’ browsing history, there are also concerns about the risk of individuals being identified and exposed, so the specific exchanges related to that have been omitted from this article.
※This article is excerpted and summarized from the 5ch (Nandemo Jikkyo G) thread “GMO just announced a groundbreaking hacking countermeasure♥“.
Leave a Reply