CyberNews Briefs

Thousands of QNAP NAS devices have been infected with the QSnatch malware

Threat actors are targeting network-attached storage (NAS) devices produced by Taiwanese tech firm QNAP with QSnatch, a malware strain that has not been spotted before. The German Computer Emergency Response Team (CERT-Bund) has reported more than 7,000 infections so far, but the campaign is targeting devices across the world.

A preliminary analysis of the malware by the National Cyber Security Centre of Finland (NCSC-FI) shows that QSnatch is capable of stealing usernames and passwords, preventing firmware updates on infected devices and making other changes to the host operating system in order to avoid detection and gain persistence. The researchers are not sure what the main purpose of the malware is, but have suggested distributed denial-of-service (DDoS) attacks, cryptocurrency mining, or creating a backdoor for future campaigns as possible answers to this question.

Read more: Thousands of QNAP NAS devices have been infected with the QSnatch malware

OODA Analyst

OODA Analyst

OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.