QNAP finds evidence of AgeLocker ransomware activity in the wild

[Gandalf_The_Grey]

Content source

https://www.bleepingcomputer.com/news/security/qnap-finds-evidence-of-agelocker-ransomware-activity-in-the-wild/

QNAP customers are once again urged to secure their Network Attached Storage (NAS) devices following a massive Qlocker ransomware campaign earlier this month.

In a security advisory published earlier today, the company says that its security team has discovered AgeLocker ransomware samples in the wild, with "the potential to affect QNAP NAS devices."

"To secure your device, we strongly recommend regularly updating QTS or QuTS hero and all installed applications to their latest versions to benefit from vulnerability fixes," QNAP said. "You can check the product support status to see the latest updates available to your NAS model."

Customers are also warned not to expose their NAS devices on the Internet since it would allow potential attackers to find them and gain access to the users' data.

A QNAP PSIRT spokesperson told BleepingComputer that NAS devices recently compromised by AgeLocker ransomware were running outdated firmware.

More info can be found in the Bleeping Computer article:

QNAP warns of AgeLocker ransomware attacks on NAS devices

QNAP customers are once again urged to secure their Network Attached Storage (NAS) devices to defend against Agelocker ransomware attacks targeting their data.

www.bleepingcomputer.com

QNAP blog:

The reason why you shouldn't connect QNAP NAS directly to the Internet without any protection | QNAP Blog

The definition of “connecting directly to the Internet” If you have enabled manual port forwarding, auto port forwarding (UPnP, Universal Plug and Play) and demilitarized zone (DMZ) for QNAP NAS in your router or modem configuration, your QNAP NAS is directly connected to the Internet. Some...

blog.qnap.com

 

[upnorth]

Scroll down to "Similar threads" and read also those, paints the picture more than well enough.