Qnap Responds to Qlocker Ransomware Attacks

Qnap Systems, Inc. issued a statement in response to recent user reports and media coverage that 2 types of ransomware (Qlocker and eCh0raix) are targeting its NAS and encrypting users’ data for ransom.

The firm urges that all users immediately install the latest Malware Remover version and run a malware scan on the firm’s NAS. The Multimedia Console, Media Streaming Add-on, and Hybrid Backup Sync apps need to be updated to the latest available version as well to further secure NAS from ransomware attacks. The firm is working on a solution to remove malware from infected devices.

The company has released an updated version of Malware Remover for operating systems such as QTS and QuTS hero to address the ransomware attack. If user data is encrypted or being encrypted, the NAS must not be shut down. Users should run a malware scan with the latest Malware Remover version immediately, and then contact the firm’s technical support.

For unaffected users , it’s recommended to immediately install the latest Malware Remover version and run a malware scan as a precautionary measure. All user should update their passwords to stronger ones, and the Multimedia Console, Media Streaming Add-on, and Hybrid Backup Sync apps need to be updated to the latest available version. Additionally, users are advised to modify the default network port 8080 for accessing the NAS operating interface. Steps to perform the operation can be found in the information security best practice offered by Qnap. The data stored on NAS should be backed up or backed up again utilizing the 3-2-1 backup rule, to further ensure data integrity and security.

Details:
Refer to the security advisory QSA-21-11 and QSA-21-13.

The company’s Product Security Incident Response Team (PSIRT) constantly monitors the latest intelligence to deliver up-to-date information and software updates, ensuring data security for users. The firm urges users to take the above-mentioned actions and periodically check/install product software updates to keep their devices away from malicious influences. Qnap also provides the best practice for improving personal and organizational information security. By working together to fight against cybersecurity threats, the firm makes the Internet a safer place for everyone.

Resource :
What is the best practice for enhancing NAS security?