QNAP raises alarm over serious vulnerability in NAS devices

security
(Image credit: Shutterstock / binarydesign)

The QNAP Product Security Incident Response Team (PSIRT) has released updates for its Network-Attached Storage (NAS) devices

NAS devices by the Taiwanese vendor are a popular target for hackers and have been on the receiving end of various cyber attack campaigns lately. Threat actors are known to actively seek out vulnerabilities in order to target QNAP devices that are accessible over the internet. 

Last month, the company released updates to safeguard devices from being exploited to mine cryptocurrency. The latest updates, however, come in response to reports of two ransomware campaigns, Qlocker and eCh0raix, that are on the prowl for vulnerable QNAP devices.

TechRadar needs you!

We're looking at how our readers use VPN for a forthcoming in-depth report. We'd love to hear your thoughts in the survey below. It won't take more than 60 seconds of your time.

>> Click here to start the survey in a new window<<

In its advisory, QNAP suggests users update their Multimedia Console, Media Streaming Add-on, and Hybrid Backup Sync apps, to mitigate the ongoing ransomware threat. 

Sanitize devices

QNAP also urges its users to fetch and run its latest malware removal tool to ensure their devices are sanitized. 

If you have been hit by the ransomware, the company suggests you don’t power down your NAS device, even if you catch the data being encrypted. Instead, you are advised to immediately run the malware scan and contact QNAP’s technical support.

To avoid being targeted, QNAP’s PSIRT suggests all users practice sensible password policies. In fact, that advice should be applicable to everyone, especially with there being no dearth of password managers that can help you set strong passwords.

Meanwhile, QNAP says it is urgently working on a solution to remove malware from infected devices.

Via The Register

Mayank Sharma

With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’s TechRadar Pro’s expert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.

Read more
Digital image of a lock.
QNAP says it has fixed several major vulnerabilities in NAS backup, recovery app
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Interlock ransomware attacks highlight need for greater security standards on critical infrastructure
Ransomware
Fortinet firewall bugs are being targeted by LockBit ransomware hackers
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Cisco, ASUS, QNAP, and Synology devices hijacked to major botnet
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
ransomware avast
Hackers spotted using unsecured webcam to launch cyberattack
Latest in Security
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
Lock on Laptop Screen
Medusa ransomware is able to disable anti-malware tools, so be on your guard
An abstract image of digital security.
Fake file converters are stealing info, pushing ransomware, FBI warns
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Coinbase targeted after recent Github attacks
hacker.jpeg
Key trusted Microsoft platform exploited to enable malware, experts warn
IBM office logo
IBM to provide platform for flagship cyber skills programme for girls
Latest in News
Zendesk Relate 2025
Zendesk Relate 2025 - everything you need to know as the event unfolds
Disney Plus logo with popcorn
You can finally tell Disney+ to stop bugging you about that terrible Marvel show you regret starting
Google Gemini AI
Gemini can now see your screen and judge your tabs
Girl wearing Meta Quest 3 headset interacting with a jungle playset
Latest Meta Quest 3 software beta teases a major design overhaul and VR screen sharing – and I need these updates now
Philips Hue
Philips Hue might be working on a video doorbell, and according to a new report, we just got our first look at it
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand