New wave of data-destroying ransomware attacks hits QNAP NAS devices

guest · Sep 8, 2022

DeadBolt has already infected thousands of QNAP storage devices this year.
By Dan Goodin @dangoodin001 - September 7, 2022

Network hardware-maker QNAP is urging customers to update their network-attached storage devices immediately to protect them from a new wave of ongoing ransomware attacks that can destroy terabytes of data in a single stroke.

Singapore-based QNAP said recently that it has identified a new campaign from a ransomware group known as DeadBolt. The attacks take aim at QNAP NAS devices that use a proprietary feature known as Photo Station. The advisory instructs customers to update their firmware, suggesting there is a vulnerability that’s under exploit, but the company makes no explicit mention of a CVE designation that security professionals use to track such security flaws.

“To protect your NAS from the DeadBolt ransomware, QNAP strongly recommends securing your QNAP NAS devices and routers by following these instructions,” company officials wrote: [...]
Click to expand...

DeadBolt first appeared in January, and within a few months, Internet security scanning service Censys said the ransomware had infected thousands of QNAP devices. The company took the unusual step of automatically pushing the update to all devices, even those that had automatic updating turned off.

Now, DeadBolt is back.
Click to expand...

DeadBolt personnel also provide instructions for obtaining the decryption key needed to recover encrypted files as well as a proposal to QNAP to purchase a master decryption key that the company could pass along to infected customers.

So far, there’s no indication that QNAP intends to avail itself of this opportunity.
Click to expand...

QNAP’s latest advisory, linked above, provides guidance on setting up QNAP’s proprietary myQNAPcloud service. Given the sensitivity of the data stored on many such devices, users should invest ample time to ensure they’re following best practices.
Click to expand...

Log in or Sign up

New wave of data-destroying ransomware attacks hits QNAP NAS devices

guest Guest

Log in or Sign up

New wave of data-destroying ransomware attacks hits QNAP NAS devices

guest Guest

Useful Searches