Security News > 2021 > May > QNAP Says Recently Patched Flaw Exploited in Qlocker Ransomware Attacks

Taiwanese network-attached storage appliance manufacturer QNAP Systems has revealed that a vulnerability in its Hybrid Backup Sync software has been exploited in Qlocker ransomware attacks.

Last month, the maker of NAS devices and professional network video recorder solutions warned of QNAP NAS devices being targeted by two ransomware families known as Qlocker and eCh0raix, advising users to download and install its Malware Remover tool to identify infections.

"A ransomware campaign targeting QNAP NAS began the week of April 19th, 2021. The ransomware known as Qlocker exploits CVE-2021-28799 to attack QNAP NAS running certain versions of HBS 3," QNAP said.

The manufacturer explained that, on the infected NAS devices, the ransomware creates password-protected 7z archives and moves users' files into them, after which it deploys a ransom note into each affected folder.

"To prevent infection from Qlocker, we recommend updating HBS 3 to the latest version," QNAP notes.

Last week, the NAS manufacturer said it was investigating reports of new malicious attacks targeting its devices, as well as continuous assaults involving the eCh0raix ransomware.

News URL

http://feedproxy.google.com/~r/securityweek/~3/7UE52NuRKVs/qnap-says-recently-patched-flaw-exploited-qlocker-ransomware-attacks