GMO Hacker Group’s Site Goes Down — 5ch: ‘A Modern Robin Hood’

From our other sites

The story

The website of the hacker group that had demanded a ransom over its cyberattack on GMO Internet went offline in the early hours of October 28. GMO is offering a ¥150 million bounty for information, and the thread saw both a punitive mood — “wouldn’t mind if someone found them and dished out some vigilante justice” — and voices praising them as “a modern Robin Hood.” The article doesn’t clarify the attacker’s nationality or whether it was a lone individual or a group, and on the thread, theories suspecting an insider (based on Japanese-language comments left in the attack code) crossed paths with theories suspecting a hacker group from overseas.

Published 10/28 (Wed) 16:21

TBS NEWS DIG Powered by JNN

In the case of the cyberattack on GMO Internet’s systems, it has come to light that the website of the hacker group that had demanded a ransom from GMO has been taken down.

Source: news.yahoo.co.jp / Original article here

What people said

5AnonymousOct 28, 2026 18:58
Find them and dish out some vigilante justice?
75AnonymousOct 28, 2026 19:10
Re: #5
Torture that absolutely never kills them sounds about right
31AnonymousOct 28, 2026 19:04
Can't the hacker just turn themselves in? (´・ω・`)
222AnonymousOct 28, 2026 19:44
Re: #31
They've obviously planned for that — that's why the bounty's so huge, to get them to sell out their buddies lol
45AnonymousOct 28, 2026 19:06
Re: #13
It says it's a US server
92AnonymousOct 28, 2026 19:13
Re: #45
Could just be a rented server — doesn't mean they're actually from that country
86AnonymousOct 28, 2026 19:12
Feels like the hacker group's gonna have a falling-out and someone'll turn traitor
Is that what they're going for?
156AnonymousOct 28, 2026 19:26
Re: #86
Nah, won't happen
There'd be retaliation from their buddies, and it's not like there's a plea deal waiting if they get caught
87AnonymousOct 28, 2026 19:12
I'm rooting for the hackers, they're a modern Robin Hood!

Everyone in the country's on the hackers' side, take down that corrupt company!
94AnonymousOct 28, 2026 19:13
Re: #87
Basically the Ishikawa Goemon of the Reiwa era 🤣 (a legendary Edo-period outlaw who stole from the rich)
122AnonymousOct 28, 2026 19:19
Bet the culprit's turning pale right about now lol, if he's Japanese
Might get raided at dawn lol
127AnonymousOct 28, 2026 19:19
Re: #122
Maybe the culprit's the Mangamura type (the operator behind the infamous pirated-manga site)
125AnonymousOct 28, 2026 19:19
If this turns out to be GMO staging it themselves, that would be quite something
203AnonymousOct 28, 2026 19:40
Re: #125
Judging from the president's posts on X, the reputational damage is immeasurable
128AnonymousOct 28, 2026 19:20
Apparently the very first victim never even used any GMO services at all — what's that about lol
208AnonymousOct 28, 2026 19:41
Re: #128
Reading the president's post, it sounds like they even know the victim's age
131AnonymousOct 28, 2026 19:21
Trash-talked everyone nonstop, dumped a bunch of bogus info, and then just had their site taken down — game over? That's pretty weak
146AnonymousOct 28, 2026 19:24
Came up with a new security countermeasure

Deliberately visit the phishing site and enter a dummy account's ID and password
When they break in using that dummy account, have a trap file ready that looks like personal data, with spyware baked into it
Infect the hacker back with the spyware, spy on them to track down their identity, then crush them

What do you think?
152AnonymousOct 28, 2026 19:25
Re: #146
Apparently you can't legally do that in Japan though
158AnonymousOct 28, 2026 19:27
Some other hacker might already be hacking this hacker's PC and pulling the data off it
169AnonymousOct 28, 2026 19:29
Re: #158
With a bounty on the line, if real hackers get serious about it, that could actually happen
This culprit does seem to be acting pretty half-assed anyway
207AnonymousOct 28, 2026 19:41
This guy's an amateur, right?
A rented server, seriously lol
212AnonymousOct 28, 2026 19:42
Re: #207
I'd guess they hijacked it
228AnonymousOct 28, 2026 19:45
Re: #207
Could also be a trap…
216AnonymousOct 28, 2026 19:43
Wait, is it even safe to turn my PC on at this point?
There's been no official announcement, right?
226AnonymousOct 28, 2026 19:45
Re: #216
Were you using Onamae's VPS? (Onamae.com, a GMO-affiliated domain/hosting service)
239AnonymousOct 28, 2026 19:47
Re: #216
You'll never be able to turn it on again, ever
Just buy a new PC
235AnonymousOct 28, 2026 19:46
Apparently the program had Japanese in it, so this really does look like an inside job
Would Chinese or Russian hackers really use something like that as a matter of course?
246AnonymousOct 28, 2026 19:49
Re: #235
Isn't that a false flag?
That "program" thing is just a JS comment, right?
You wouldn't leave comments like that in the first place
251AnonymousOct 28, 2026 19:50
Re: #235
When I heard that, I wondered — if they had an AI build the Japanese-language site, couldn't the AI have just written the comments in Japanese too?

Background and Key Points of Debate

For a company like GMO to put up a bounty on its own, without waiting for an official investigation, is a move closer to tactics seen in overseas ransomware responses, and it’s unusual for a Japanese company. The biggest point of disagreement on the thread is the profile of the culprit: because the attack code contained Japanese-language comments, some suspect an insider or a Japanese national, while others suspect an organized hacker group from abroad — and the article doesn’t confirm either theory. It’s also unclear whether the near-simultaneous takedown of the ransom site itself was a direct result of GMO’s bounty or came from some other pressure, and the thread’s speculation doesn’t settle that either. The comments praising the hacker group as a “Robin Hood” figure stem from the premise that the victimized company’s image was already poor to begin with — it’s easy to misread this as the thread endorsing the attack itself, which it isn’t.

※This article is excerpted and summarized from the 5ch (News Flash+) thread “GMO Attack: Hacker Group’s Site Goes Down in the Early Hours Today — GMO Offers a ¥150 Million Bounty for Information.”

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *