Collaborate Disseminate
We’ve covered quite a few stories about malware sneaking into the NPN and other JavaScript repositories. This is a bit different. This time, a JS programmer vandalized his own packages. …read more Continue reading This Week in Security: NPM Vandalism, Simulating Reboots, and More
Unsecured QNAP NAS devices are getting covertly saddled with a new bitcoin miner, QNAP has warned users. “Once a NAS is infected, CPU usage becomes unusually high where a process named ‘[oom_reaper]’ could occupy around 50% of the tot… Continue reading QNAP NAS devices targeted by new bitcoin miner
Network-attached storage (NAS) devices are a helpful solution for storing, managing, and sharing files and backups and, as such, they are an attractive target for cyber criminals. They are most often used by consumers (on home networks) and small-to-me… Continue reading NAS devices under attack: How to keep them safe?
With all the headlines about ransomware attacks hitting companies hard, you might think there’s only bad news around the subject.
Well, think again.
Read more in my article on the Tripwire State of Security blog. Continue reading Qlocker ransomware gang shuts shop after extorting owners of QNAP NAS drives
QNAP NAS device owners are once again under attack by ransomware operators, who are exploiting a recently fixed vulnerability to lock data on vulnerable devices by using the 7-Zip open-source file archiver utility. According to Lawrence Abrams, the ran… Continue reading QNAP NAS devices under ransomware attack
The high-severity cross-site scripting flaws could allow remote-code injection on QNAP NAS systems. Continue reading QNAP High-Severity Flaws Plague NAS Systems
There are approximately 62,000 malware-infested QNAP NAS (Network Attached Storage) devices located across the globe spilling all the secrets they contain to unknown cyber actors, the US CISA and the UK NCSC have warned. Dubbed QSnatch, the sophisticat… Continue reading 62,000 QNAP NAS devices infected with persistent QSnatch malware
QNAP Systems says there is no known way to remove the Qsnatch malware infecting its NAS devices besides a full factory reset. Continue reading Stubborn Malware Targets QNAP NAS Hardware Specifically
A victim of the Muhstik ransomware paid his attackers money to recover his files, but then wrought his revenge by hacking them right back.
Read more in my article on the Tripwire State of Security blog.
Continue reading Ransomware victim hacks attacker, turning the tables by stealing decryption keys
In a cybersecurity study of network attached storage (NAS) systems and routers, Independent Security Evaluators (ISE) found 125 vulnerabilities in 13 IoT devices, reaffirming an industrywide problem of a lack of basic security diligence. The vulnerabil… Continue reading Researchers uncover 125 vulnerabilities across 13 routers and NAS devices