[VipJCCS]

The QSnatch malware that infects QNAP NAS users has expanded to countless devices. The malware injects itself into the firmware of the NAS devices, then runs as “normal operation.” It connects back to the attacker’s C2 server to send user credentials, as well as obtain more malicious code if necessary or desired. The malware stops all firmware updates and operating system scripts are modified. This makes it very difficult to remove the malware.

QNAP Warns Users to Secure Devices Against QSnatch Malware

Topic