From our other sites
The story
On the 27th, GMO Internet Group called on customers to power off their PCs by noon after receiving a threat from someone believed to be behind unauthorized access to its services, warning that “customers will be attacked at noon on the 27th.” The company advised users to back up their data, unplug cables before shutting down, run a virus scan, and ignore any suspicious messages asking for passwords or authentication codes. On 5ch, reactions split between practical advice on how to respond and skepticism about how effective the request would actually be, with comments like “there’s no way the attack just stops at noon.”
On the 27th, GMO Internet Group asked customers to shut down their computers by noon amid unauthorized access to its services. The company had received a threat from someone believed to be the attacker, stating that customers would be attacked at noon on the 27th.
GMO called on users to back up their PCs, then unplug all connected cables before powering down. It also advised running a virus scan on devices. The company stated it would never ask for passwords or authentication codes, and urged customers not to respond to any suspicious contact.
Nikkei, October 27, 2026, 10:33
Source: nikkei.com / Original article here
What people said
Not bad, you!
That's basically every higher-up in this country, lol
Minister Hosono issues "urgent request" to all citizens: stock up on food, water, and toilet supplies [首都圏の虎★]
https://asahi.5ch.io/test/read.cgi/newsplus/1793057853/
Unplugging the LAN and powering off is the only real option
It could get switched back on remotely
Cut the Wi-Fi at the router too so it can't connect at all
Though if your data's already been grabbed, it's game over anyway
Customers are managing the servers??????
Don't tell me this is finance's first-ever P2P setup?
No, I think the story is attackers are getting into customers' personal PCs through this company's app or similar.
So they're saying unplug it, or otherwise make sure it can't start up at all (including the possibility of a remote power-on).
Because stuff like session hijacking happens —
Reports of unauthorized trades on FX accounts: GMO issues urgent warning over "Onamae.com" breach
They're urgently asking users to change passwords on trading tools and accounts, and to log off to cut their sessions.
Why does session hijacking happen? The mechanics of the attack and the countermeasures needed
https://eset-info.canon-its.jp/malware_info/special/detail/230110.html
Session hijacking is a cyberattack in which a third party steals the "session ID" (a temporary authentication key)
used to keep you logged into a web service, then impersonates you.
Without ever entering an ID or password, they can freely operate your logged-in account.
The original statement clearly specifies JST
Pretty considerate of them
Just pull the plug! (；ω；)
Tokyo time or Beijing time, that is the question!
What's the Digital Agency planning to do about it
They'd better move fast, lol
They'll set up a Ransomware Countermeasures Bureau and request a budget for it
This company isn't really big enough to call "financial infrastructure"
I get the feeling the government wouldn't mind if it went under, lol
They've announced they're attacking customers' PCs, remember
Yeah, that means you're already compromised
There's no way they're only attacking at noon — obviously it'll keep going after that too, however you look at it
Simply put, they're saying your device is already infected, so don't turn it on.
Seriously, right
What a considerate hacker, only attacking at the time they announced
Somehow the motive reeks of something other than money
They probably knew from the start they wouldn't get paid
The real goal is probably trashing the company's image
Though I never thought GMO's image was all that great to begin with, lol
What for?
They'll probably use the leaked personal info to break into other companies' services
Stuff like account takeovers
Turning off your own PC won't protect you from that kind of thing
It's a show of force
If GMO doesn't comply,
they'll expose what's inside GMO customers' PCs
So it's a hacker group that breaks through even if you cut it off at the router…
These guys are way too tough, lol
If the power's on, there could well be a virus in there that boots itself up the moment the connection drops, worst case.
Real strong, GMO…
Isn't that just short-selling?
"We'll follow up by email"
They're bothering to send email to the addresses they stole, so they've probably grabbed your IP too
There's a chance there's something in there that checks the clock when you power on and self-destructs.
If you back up first and then access it from a different PC, you might be able to remove the virus afterward and still recover the data.
Worst case, even eyeballing it and copying files by hand, recovery itself should still be possible.
I doubt they'd let it self-destruct
More likely the pattern is: lock it down, then demand a ransom payment to unlock it
right?
Will regulation come in and make analog equipment valuable again
Or will it just forge ahead headlong into chaos as-is
I think it'll just forge ahead headlong
Same as it went with railways and cars
Background and Key Points of the Discussion
GMO has previously been reported to have suffered unauthorized access incidents on services including “Onamae.com,” and this latest request — alongside password changes and logging off — was framed as a countermeasure against “session hijacking,” in which an attacker takes over a user’s logged-in session. Opinion in the thread split mainly over how effective the request would actually be, with comments like “there’s no way they’d only target noon” and “powering off alone doesn’t guarantee protection” standing out, even as posters traded practical tips such as unplugging the LAN cable or cutting the router connection. It’s worth noting that, as of the morning of the 27th, neither news reports nor the thread had confirmed who sent the threat, their motive, or the actual extent of any leaked personal information — so speculation about whether this is financially motivated or aimed at damaging the company’s image remains just that, speculation.
*This article is excerpted and summarized from the 5ch (News Flash+) thread “[Breaking] GMO asks customers to power off PCs after threat of an attack at noon on the 27th.”
Leave a Reply