Calgarypuck Forums - The Unofficial Calgary Flames Fan Community
Old 04-22-2021, 02:48 PM   #1
GoinAllTheWay
Franchise Player
 
GoinAllTheWay's Avatar
 
Join Date: Apr 2003
Location: Not sure
Exp:
Default Attn QNap NAS owners!! Ransomware!!

If anyone here owns a Qnap NAS, check it immediately. Freakin vulnerability is being exploited resulting in entire drive being encrypted. There are fixes if not too late but would suggest disconnecting from network. It's happening globally.

Info here:

https://forum.qnap.com/viewtopic.php?f=45&t=160849

I got nailed. 15 yrs of pics & videos locked up tight. Thankfully I have an HDD that I back up to frequently and leave at my office. I haven't lost much but many many people used the Qnap as their backup and nothing else. Really, really bad stuff.
GoinAllTheWay is offline   Reply With Quote
The Following User Says Thank You to GoinAllTheWay For This Useful Post:
Old 04-22-2021, 04:07 PM   #2
Fuzz
Franchise Player
 
Fuzz's Avatar
 
Join Date: Mar 2015
Exp:
Default

This is only if you exposed it to the internet, right?



Is there a patch to prevent his I should install?
Fuzz is offline   Reply With Quote
Old 04-22-2021, 04:19 PM   #3
GoinAllTheWay
Franchise Player
 
GoinAllTheWay's Avatar
 
Join Date: Apr 2003
Location: Not sure
Exp:
Default

Quote:
Originally Posted by Fuzz View Post
This is only if you exposed it to the internet, right?
Yes I think so but it sounds like the attackers got in through vulnerabilities in some of the apps on the server. Lots of people saying theirs wasn't exposed but got hit anyways. I think the only way to stay safe is to make sure you are 100% updated or disconnect it from your network.

Good news is it appears to only affect the Qnap device and doesn't not spread beyond it to PC's on your network.
GoinAllTheWay is offline   Reply With Quote
Old 04-22-2021, 04:20 PM   #4
Fuzz
Franchise Player
 
Fuzz's Avatar
 
Join Date: Mar 2015
Exp:
Default

OK, looks like it is only if you have exposed it through open ports, or use UPnP. Both bad ideas. So mine looks fine. Ran a malware scan and an update.
Fuzz is offline   Reply With Quote
Old 04-22-2021, 04:36 PM   #5
GoinAllTheWay
Franchise Player
 
GoinAllTheWay's Avatar
 
Join Date: Apr 2003
Location: Not sure
Exp:
Default

Just reading that now too. I had UPnP enabled on my bloody router. I thought I had that turned off, man am I mad at myself. Regardless, I'm dumping this QNap. After reading about this attack, it seems to be far from Qnap's first.
GoinAllTheWay is offline   Reply With Quote
Old 04-22-2021, 04:39 PM   #6
Fuzz
Franchise Player
 
Fuzz's Avatar
 
Join Date: Mar 2015
Exp:
Default

Ya, I use one as an archive box on our network, but don't trust to expose it to anything. And I have multiple offline backups. It's mostly just a big storage tank for people to access old projects.


That's the thing with this consumer stuff, it can never be secure. If you need in, use a VPN, and don't open any ports on your router!
Fuzz is offline   Reply With Quote
The Following User Says Thank You to Fuzz For This Useful Post:
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -6. The time now is 04:15 PM.

Calgary Flames
2023-24




Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright Calgarypuck 2021