QSnatch Data-Stealing Malware Has Infected Over 62,000 QNAP NAS Devices

Cybersecurity agencies in the US and UK yesterday issued a joint advisory about a massive ongoing malware threat infecting Taiwanese company QNAP's network-attached storage (NAS) appliances.

Called QSnatch (or Derek), the data-stealing malware is said to have compromised 62,000 devices since reports emerged last October, with a high degree of infection in Western Europe and North America.

"All QNAP NAS devices are potentially vulnerable to QSnatch malware if not updated with the latest security fixes" the US Cybersecurity and Infrastructure Security Agency (CISA) and the UK's National Cyber Security Centre (NCSC) said in the alert.

"Further, once a device has been infected, attackers can prevent administrators from successfully running firmware updates."

The mode of compromise, i.e., the infection vector, still remains unclear, but CISA and NCSC said the first campaign likely began in 2014 and continued till mid-2017 before intensifying over the last few months to infect about 7,600 devices in the US and approximately 3,900 devices in the UK.

Full article on https://thehackernews.com/2020/07/qnap-nas-malware-attack.html

#qnap #hack #datastorage #nas #yokdata