What happened

Japanese internet company GMO has confirmed a breach of its Onamae.com Desktop Cloud, a virtual desktop service popular with financial traders. Attackers posted stolen customer data, and GMO says up to 26,739 customer servers could be affected.

Why it matters

Hosted virtual desktops often hold trading tools, saved logins and session data in one place. A breach at that layer can give attackers a direct path into accounts, wallets and the systems behind them, well beyond the provider itself.

How to protect your AWS environment

• Treat every hosted desktop or jump box as a high-value target, with MFA and short session limits.
• Never store long-lived cloud credentials on shared or hosted desktops.
• Rotate credentials immediately when any provider you rely on reports an incident.

Source: Click to Read the original report (BleepingComputer)

‍