Data is encrypted and “README” text file left
Applied models:
- All NAS Series
Applied Firmware:
- All QTS Firmware Versions
When found data/files are encrypted and there is a message text in the folder(or every folder) to let the user know how to get the decrypting method. User could recover data via snapshot or from previous backed up data. It is recommended to re-initialize NAS and apply the following security measures to prevent from future reoccurrance:
- manage accounts and confirm they are known users
- manage applications(QPKG) and prevent unknown app
- disable auto router configuration and set up device access controls in myQNAPcloud (don’t open SSH or telnet to internet)
- avoid default ports to the Internet.
- install and run the latest version of Malware Remover.
- change passwords for all accounts every few months or half a year
- update QTS to the latest available version/ installed QTS applications to the latest versions.
- install QuFirewall and secure the NAS from unknown access attempts
- please refer to QNAP Security Advisory newsletter.
Note: If the found data/files are encrypted with the .7z extension and !!!READ_ME.txt!!! is found in the same folder, please follow the instructions in the link below.
What should I do when found nas is encrypting my files by 7z?
Related link
需要进一步协助,欢迎前往官方社区发帖,与其他用户及 QNAP 专家交流。 前往 QNAP 官方社区