QNAP Newsroom

Taipei, Taiwan, January 21, 2021 - QNAP® Systems, Inc. (QNAP), a leading computing, networking and storage solution innovator, today issued a statement in response to recent user reports that a new type of malware named dovecat is targeting QNAP NAS and installing bitcoin miners without user consent.

According to analysis, QNAP NAS can become infected when they are connected to the Internet with weak user passwords. To minimize the risk of a dovecat infection, QNAP strongly urges NAS users to take the following actions:

• Update QTS to the latest version.
• Install the latest version of Malware Remover.
• Install Security Counselor and run with Intermediate Security Policy (or above).
• Install a firewall.
• Enable Network Access Protection to protect accounts from brute force attacks.
• Use stronger admin passwords.
• Use stronger passwords for database administrators.
• Disable SSH and Telnet services if not in use.
• Disable unused services and apps.
• Avoid using default port numbers (80, 443, 8080 and 8081).
• Follow best practices for enhancing NAS security:
  https://www.qnap.com/go/how-to/faq/article/what-is-the-best-practice-for-enhancing-nas-security/

These actions can further enhance NAS security and make it harder for dovecat to enter your QNAP NAS.

The QNAP PSIRT has made it a priority to develop a solution that will remove dovecat from infected devices. If you have any further questions regarding this issue, please contact QNAP at https://service.qnap.com/.