black october just got worse. a japanese company lost 27,000 servers and it’s not even the scariest part GMO Internet runs a cloud service called Onamae Desktop, mostly used by forex traders running automated trading bots hackers broke in, installed malware across up to 26,739 servers, stole trading credentials and started making unauthorized trades on people’s accounts not one broker. over 70 different securities and forex firms across japan and internationally. people woke up to trades they never made, money moving they never authorized OANDA Japan froze customer withdrawals. GMO refused to pay the ransom, permanently shut down the entire service, and did something nobody expected they asked the japanese government to use brand new active cyber defense powers, literally military-grade authority that just went into effect october 1st, to trace and neutralize the attackers’ infrastructure. the government can now legally hack back the technical details from the attacker’s own site are terrifying. GMO configured their VPS network using Active Directory, something you should never do on shared hosting every server had admin credentials. and the RDP files customers used to connect? drive redirect was enabled by default, meaning the moment you connected to your VPS, your entire local PC was shared with the server hackers didn’t just own the servers. they had a direct path into every customer’s personal computer. they extracted data, installed backdoors. customers were exposed like this for over 7 years 27,000 servers. 70+ brokers. unauthorized trades. personal computers backdoored. a company begging its government to go to cyber war october isn’t slowing down