QNap malware alert

[jeyf]

if you run a qnap nas box there is a "QSnatch" malware infection you might be concerned about.

la official advisory

if you own a newer qnap nas box and downloading the latest firmware possible do it
change your admin pw

qnap has an app you can down load run; "Malware Remover"

 

[jeyf]

i did some further research:
-the "Qsnatch" malware infected NAS boxes made mid 2018. Other small out breaks of malware, mainly from the Qnap 3rd party applications, have occurred more recent.
-setup and run "Malware Remover" if you want. This application will run once a day at your set time. Defaults to 3pm & it will call home with results. I set the run time = early morning and disable the call home, keeping the results in a local log.


on a side note:
the qnap nas box has a built in web page where you can use "admin" account to set up things. For this traffic done on your LAN side (home side of your router) HTTPS:// is not possible. Reasonable to assume this is not important to most of us. How secure tho is your wifi??

 

[jeyf]

I am reposting a warning for Qnap products
seems the malware could still floating around be careful