QNAP NAS Ransomware - take action to secure your system

Friday, 23 April 2021
QNAP NAS Ransomware - take action to secure your system

 

QPAN systems issued a statement today regarding a ransomware attack (Qlocker and eCh0raix) targeting QNAP NAS and encrypting users’ data for ransom

 

Escape Technology strongly urges all our clients who own QNAP NAS systems to immediately install the latest Malware Remover version and run a malware scan on QNAP NAS to protect your systems.

 

What should I do?

 

  • Install the latest Malware Remover version (which can be found in your QNAP system) and run a malware scan on QNAP NAS to protect your systems.
  • Update the Multimedia Console, Media Streaming Add-on, and Hybrid Backup Sync apps to the latest available version to further secure your QNAP NAS from ransomware attacks. Rest assured, QNAP is urgently working on a solution to remove malware from infected devices.

QNAP has released an updated version of Malware Remover for operating systems such as QTS and QuTS hero to address the ransomware attack. If user data is encrypted or being encrypted, the NAS must not be shut down. Users should run a malware scan with the latest Malware Remover version immediately, and then contact QNAP Technical Support at https://service.qnap.com/.

 

For unaffected users 

Escape Technology recommended that you immediately install the latest Malware Remover version and run a malware scan as a precautionary measure. 

User should update their passwords to stronger ones, and the Multimedia Console, Media Streaming Add-on, and Hybrid Backup Sync apps need to be updated to the latest available version

Additionally, users are advised to modify the default network port 8080 for accessing the NAS operating interface. Steps to perform the operation can be found in the information security best practice offered by QNAP (https://qnap.to/3daz2n). 

The data stored on NAS should be backed up or backed up again utilizing the 3-2-1 backup rule, to further ensure data integrity and security.

For details, please refer to the QNAP security advisory QSA-21-11 (https://qnap.to/3eq7hy) and QSA-21-13 (https://qnap.to/3dygse).

 

Questions?

The Escape Technology team always advise that you periodically check/install product software updates to keep your devices away from malicious influences. If you do need to speak to a member of the team about this please contact us at This email address is being protected from spambots. You need JavaScript enabled to view it.