
日媒報導,GMO網路集團旗下服務遭不當存取事件,子公司早在去年4月就已點出系統漏洞並要求檢討,但未獲充分對策。
日本GMO網路集團旗下服務遭不當存取,勒索100萬美元。據悉GMO旗下資安公司早在2024年4月就已指出系統漏洞並示警可能遭勒索,但集團未採取充分對策,最終釀成災情。
AI-generated summary
GMO旗下服務遭第三方不當存取,攻擊者索討100萬美元贖金,高達2萬6739台伺服器客戶資料恐遭外洩。
(中央社東京1st綜合外電報導)日本大型IT企業GMO網路集團旗下服務先前遭不當存取。據GMO幹部透露,旗下資安公司早在2024年4月就指出系統有漏洞,並要求從根本檢討系統,但GMO未採取充分對策,最終釀成此次事件。
「日本經濟新聞」報導,指出漏洞的是GMO旗下子公司GMO Cybersecurity by Ierae。該公司2022年2月加入GMO集團,以擁有一批頂尖「白帽駭客」聞名。
Ierae於2024年4月全面檢查GMO經營的網路事業服務時,發現系統存在漏洞。當時Ierae高層直接向GMO幹部報告發現漏洞的情況,並說明有必要採取因應對策。
報告涵蓋的服務包括此次遭不當存取的「お名前.com Desktop Cloud」,該服務用於外匯保證金交易的自動交易。
此次事件中,第三方曾操作用戶的外匯交易帳戶,另有2萬6739台伺服器的客戶資料可能遭瀏覽。攻擊者向GMO索取100萬美元(約新台幣3100萬元)贖金,GMO表態不會支付。
報導指出,Ierae在2024年就已預見此次災情。報告指出,若攻擊者利用漏洞,就可能竊取外匯交易所需的認證資訊,也提到可能遭受勒索軟體攻擊。
報導認為,這意味著當時收到報告的GMO,已意識到伺服器上的用戶資料可能被當成「人質」,成為攻擊者勒索的籌碼。
GMO幹部表示,要修補漏洞必須更新整套系統,但公司未採取充分對策。這名幹部說:「可能是因為無法下定決心,全面停止以24小時全天候運作為賣點的服務。」
GMO網路公司社長伊藤正上月29日在員工說明會上表示:「事到如今,我非常後悔。」母公司GMO網路集團會長兼社長熊谷正壽上月25日也在個人部落格說明:「應對的深度與速度都不夠充分,讓攻擊者有機可乘。」
GMO公關部門接受日經採訪時,證實確實舉行員工說明會,但對於子公司報告系統漏洞一事,表示:「關於個別指出事項的時間、內容及相關人員,恕不回應。」
The 2026 World Internet Conference Wuzhen Summit will be held in Wuzhen, Zhejiang from November 2 to 5. Highlights of this summit include the first centralized display of 6G technology, driverless shuttle bus applications, AI robot services, and the new Puyuan branch venue, which is fully open to the public for reservations.

Tsinghua University professor Tang Jie stated in Shanghai that recursive self-improvement (RSI) is the primary research challenge for achieving artificial general intelligence, noting its potential to accelerate AI development.

The 3rd Blockchain Innovation Summit Forum was held in Shanghai. It released the cross-border data flow infrastructure and six major cross-border business scenarios, and unveiled the Hongqiao cross-border credit financing service site, aiming to solve the problem of trusted data flow in enterprises' cross-border operations.

Anthropic announced that starting from November 3, SynthID-Text text watermarks will be fully added to four existing models: Claude Mythos 5, Opus 4.7, Opus 4.6 and Sonnet 4.6, aiming to comply with the EU Artificial Intelligence Law.
A report released by the China Electronics Information Industry Development Research Institute shows that as of June 2026, the amount of my country's artificial intelligence inference data has exceeded the amount of training data for the first time, and the average daily word element calls have exceeded 175 trillion, marking that AI has fully entered the stage of large-scale industrial application from laboratory research and development.

During the 2026 Hangzhou Marathon, the bipedal robot "Hangxing II" jointly built by the Hangzhou Public Security Traffic Control Department and Yunshen Technology made its debut, undertaking tasks such as intersection guarding, autonomous cruising, and traffic violation persuasion, and exploring the standardized application model of humanoid robots in traffic support for large-scale events.