{"id":197055,"date":"2021-03-08T21:07:30","date_gmt":"2021-03-08T18:07:30","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/qnap-nas-devices-can-be-hacked-for-cryptomining-update-yours-now-review-geek\/"},"modified":"2021-03-08T21:07:30","modified_gmt":"2021-03-08T18:07:30","slug":"qnap-nas-devices-can-be-hacked-for-cryptomining-update-yours-now-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/qnap-nas-devices-can-be-hacked-for-cryptomining-update-yours-now-review-geek\/","title":{"rendered":"#QNAP NAS Devices Can Be Hacked for Cryptomining\u2014Update Yours Now \u2013 Review Geek"},"content":{"rendered":"

“#QNAP NAS Devices Can Be Hacked for Cryptomining\u2014Update Yours Now \u2013 Review Geek”<\/strong><\/p>\n

\n
\"view
monte_a\/Shutterstock.com<\/a><\/span><\/figcaption><\/figure>\n

QNAP\u2019s unpatched network-attached-storage (NAS) devices are the latest devices to be targeted in <\/span>ongoing attacks<\/span><\/a>, which are aimed at taking them over for use as cryptocurrency miners. The malware, discovered by Qihoo\u2019s 360 Netlab, exploits multiple pre-auth remote command execution vulnerabilities found in a QNAP Helpdesk app<\/a> patch made in October 2020.<\/span><\/p>\n

\u201cWe noticed the attacker customized the program by hiding the mining process and the real CPU memory resource usage information, so when the QNAP users check the system usage via the WEB management interface, they cannot see the abnormal system behavior,\u201d 360 Netlab\u2019s researchers stated in a report.<\/span><\/p>\n

360 Netlab <\/span>named the malware<\/span><\/a> UnityMiner, and informed QNAP of the ongoing cryptomining campaign a day after finding it. They noted that all QNAP NAS devices with firmware released before August 2020 are vulnerable, which to their count is nearly 4.3 million NAS devices.<\/span><\/p>\n

\u201cTo ensure the security of their QNAP NAS, users are urged to install their applicable update(s) at the earliest convenience. Alongside these software updates and published security advisories, QNAP has also sent individual notification emails to known Surveillance Station users, to minimize the impact caused by the issue,\u201d said QNAP.<\/span><\/p>\n

The company\u2019s NAS devices have actually been under attack for months now, with warnings of infections going back to August 2019 regarding QSnatch malware, Muhstik Ransomware infections, the eChOraix Ransomware campaign, and AgeLocker Ransomware attacks.<\/span><\/p>\n

If you own a QNAP NAS, you should take the necessary steps to secure it. Change your passwords for all accounts on it, update device firmware and applications, remove unknown users and applications from it, install QNAP\u2019s MalwareRemover app from the AppCenter, and set an access control list.<\/span><\/p>\n

via <\/span>Bleeping Computer<\/span><\/a><\/small>\n<\/div>\n