Taiwanese manufacturer QNAP sent a notification to all NAS users last week to update their firmware and all apps. New ransomware called AgeLocker can infect systems that are not up to date, encrypt data and make ransom demands.
AgeLocker has been operating since June and uses the AGE algorithm to encrypt files. That algorithm is considered cryptographically safe, meaning that encrypted files cannot be unlocked without paying money to the hackers.
Because of the secure encryption, it is crucial that owners with a QNAP NAS thoroughly secure their device and keep it up-to-date.
QTS in Photo Station
Last week, QNAP identified two sources that allow AgeLocker to access QNAP devices. The first gateway is the QNAP firmware called QTS. The second way is through one of the standard apps that come pre-installed on recent QNAP systems.
Those who update QTS to the latest version are protected against AgeLocker ransomware attacks. According to QNAP, old QTS versions pose a big risk. QNAP does not say which version you are at risk from. The manufacturer does encourage an active update policy to prevent such problems.
In addition to a vulnerability in an old version of BTS, QNAP has also found a leak in old versions of the Photo Station app. Here, too, periodically updating NAS apps is always important to limit any security risks.
Tip: QNAP NAS servers target large malware campaign
*The article has been translated based on the content of Source link by https://www.techzine.be/nieuws/security/61045/qnap-adviseert-firmware-update-tegen-ransomware-aanval/
. If there is any problem regarding the content, copyright, please leave a report below the article. We will try to process as quickly as possible to protect the rights of the author. Thank you very much!
*We just want readers to access information more quickly and easily with other multilingual content, instead of information only available in a certain language.
*We always respect the copyright of the content of the author and always include the original link of the source article.If the author disagrees, just leave the report below the article, the article will be edited or deleted at the request of the author. Thanks very much! Best regards!