Emergency Report: The Massive Onamae.com VPS Breach, MT4 Credential Leak, and the Threat of CORONAMNG.STORE

Tue, 27 Oct 2026 17:15:00 +0900

In October 2026, Japan’s largest internet infrastructure conglomerate, GMO Internet Group, suffered a catastrophic security breach targeting its flagship Windows Virtual Private Server (VPS) platform, “Onamae.com Desktop Cloud.” Following the discovery of unauthorized intrusions and malicious malware implants capable of scraping credentials, GMO took the unprecedented step on October 21 of forcefully suspending all 26,739 active virtual machines across all subscription tiers. The crisis escalated dramatically on October 27 when threat actors surfaced a dedicated portal, CORONAMNG.STORE, designed to publish ransom demands and showcase stolen user data. This comprehensive technical investigation dissects the incident timeline, exploitation vectors, and the critical hazards surrounding the adversary site.

Vps on IT News

Emergency Report: The Massive Onamae.com VPS Breach, MT4 Credential Leak, and the Threat of CORONAMNG.STORE