QNAP sent a warning to its customers last Friday for a series of DeadBolt-type ransomware attacks. It is recommended that all QNAP NAS devices be updated with the latest firmware. The attacks appear to target QNAP nas devices running QTS 4.x.
This is the fourth time (first, second, third) this year that QNAP has issued a warning about ransomware. Thousands of users have already been affected. Its files are inaccessible and the NAS login screen has been replaced with a DeadBolt ransom note. All files are encrypted with AES128 and provided with a .deadbolt extension. The victim will have to pay 0.03 bitcoins and then the key will be returned with a counter-transaction.
QNAP states that updating the firmware allows the built-in Malware Remover to quarantine the DeadBolt software and the login page. However, affected customers seem to have no choice but to pay the ransom. QNAP has instructions for finding DeadBolt payment orders in a quarantined system. After that, the encryption can be recovered with the password.
source: beeping computer
Source: Hardware Info
