Data is encrypted and “README” text file left
最后修订日期:
2022-06-24
Applied models:
- All NAS Series
Applied Firmware:
- All QTS Firmware Versions
When found data/files are encrypted and there is a message text in the folder(or every folder) to let the user know how to get the decrypting method. User could recover data via snapshot or from previous backed up data. It is recommended to re-initialize NAS and apply the following security measures to prevent from future reoccurrance:
- manage accounts and confirm they are known users
- manage applications(QPKG) and prevent unknown app
- disable auto router configuration and set up device access controls in myQNAPcloud (don’t open SSH or telnet to internet)
- avoid default ports to the Internet.
- install and run the latest version of Malware Remover.
- change passwords for all accounts every few months or half a year
- update QTS to the latest available version/ installed QTS applications to the latest versions.
- install QuFirewall and secure the NAS from unknown access attempts
- please refer to QNAP Security Advisory newsletter.
Note: If the found data/files are encrypted with the .7z extension and !!!READ_ME.txt!!! is found in the same folder, please follow the instructions in the link below.
What should I do when found nas is encrypting my files by 7z?
