TOKYO - A website for victims of a cyberattack on GMO Internet Group Inc. to share information may have been set up by the attacker, as the site and another that the hacker used to claim responsibility for the act have many similarities in their web structure, analysis by security experts found Saturday.
The attacker possibly sought to get information from victims through the "victim information sharing forum" website, the experts said.
The website was registered on Oct. 19, two days before the Japanese internet infrastructure provider made the cyberattack public, according to the analysis. The information sharing website was confirmed to be available as of Oct. 22.
The overall design structure and parts of the source code of the two websites are similar, the experts said.
The two sites are "pretty much identical," one of the experts said.
Last week, the company confirmed that customer information related to its foreign exchange trading service was leaked without authorization and used in fraudulent transactions.
The hacker threatened to disclose customer information and conduct a ransomware attack. GMO did not respond to the request and some customer information was disclosed on Tuesday.
