Onamae Desktop Cloud Infrastructure Compromised, Malware Installed on Thousands of VPS Servers
Up to 26,739 customers' servers affected in Japan-based VPS provider breach
Key Takeaways
- Onamae Desktop Cloud, a Japan-based VPS provider, reported a infrastructure compromise.
- Up to 26,739 customer servers are estimated to have been infected with malware.
- The specific malware variant and exploitation method have not been publicly detailed.
- The full extent of potential data theft or further infiltration is under investigation.
- Customers are advised to monitor their systems and await official guidance from the provider.
Quick answers
- What happened?
- Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular virtual private server provider in Japan, and installed malware on customer servers. The full extent of the compromise and the specific malware variant remain under investigation.
- Which products are affected?
- Onamae Desktop Cloud
- What should defenders do?
- Affected customers should immediately isolate compromised systems, perform thorough malware scans, and apply all available security updates. Onamae Desktop Cloud should release an official security advisory detailing the compromise, the identified threat, and recommended remediation steps for customers.
According to a report by BleepingComputer, the infrastructure of Onamae Desktop Cloud was compromised by unidentified threat actors. Malware was installed on a significant number of customer servers, with estimates suggesting up to 26,739 systems were affected. The incident was discovered on October 21, 2026. The report indicates that the attackers gained access to the provider's infrastructure, though the initial vector or exploitation method has not been detailed in the available summary. The compromise poses risks of data theft and further infiltration for affected customers. As of now, specific details regarding the malware variant, the exact entry point, and the full scope of data exfiltration remain unverified. Onamae Desktop Cloud has not issued an official statement confirming the scale or technical details of the incident.
Security Details
Hackers compromised the Onamae Desktop Cloud infrastructure and installed malware on customer servers. The specific malware variant, exploitation vector, and full scope of data compromise are currently unconfirmed and under investigation.
Affected products
Onamae Desktop Cloud
Mitigation
Affected customers should immediately isolate compromised systems, perform thorough malware scans, and apply all available security updates. Onamae Desktop Cloud should release an official security advisory detailing the compromise, the identified threat, and recommended remediation steps for customers.
Sources
BleepingComputer
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Oct 21, 2026 · 21:43
Original link
Related Security News
OVHcloud GitHub Compromise Attributed to GlassWorm Threat Actors
A developer's GitHub account, compromised several months prior to discovery, was leveraged by GlassWorm threat actors to push malicious code to unsuspecting users. The incident ties back to OVHcloud infrastructure and highlights ongoing supply chain risks within the developer ecosystem.
