Qnap Responds to QSnatch Attacks: Take Actions to Secure NAS

Qnap Systems, Inc. issued a statement in response to a recent report from Traficom and media coverage that the QSnatch malware is targeting the company’s NAS and attempting to obtain access.

The firm has updated its Malware Remover app for the QTS OS on November 1 to detect and remove the malware from the company’s NAS. It also released an updated security advisory on November 2 to address the issue. Users are urged to install the latest version of the ‘Malware Remover app’ from QTS App Center or by manual downloading from the firm’s website. It also recommends a series of actions for NAS security enhancements. They’re also detailed in the security advisory.

Furthermore, the firm clarifies that it has never recommended a reinitialization to purge the malware from NAS. Users are advised to take actions listed in the security advisory or, alternatively, contact technical assistance. Instructions for creating a support request can be found here.

The company would like to acknowledge NCSC-FI of Finland and CERT-Bund of Germany for their research and assistance during the investigation of the issue.