QNAP Newsroom

Taipei, Taiwan, March 24, 2021 - QNAP® Systems, Inc. (QNAP), a leading computing, networking and storage solution innovator, considers product security its top priority. With increasing reports of brute-force attacks, QNAP urges its users to take immediate action to enhance the security of their devices. These actions include using strong passwords, changing the default access port number, and disabling the admin account.

Recently QNAP has received multiple user reports of hackers attempting to log in to QNAP devices using brute-force attacks – where hackers would try every possible password combination of a QNAP device user account. If a simple, weak, or predictable password is used (such as "password" or "12345") hackers can easily gain access to the device, breaching security, privacy, and confidentiality.

To take steps to avoid being hacked, QNAP recommends that users do not expose their devices on public networks. Using default network ports for public services should be avoided as well. Other steps to strengthen the security of QNAP appliances and mitigate brute-force attacks include setting complex (strong) passwords for user accounts, enabling password policies, and disabling the admin account. For more information, please refer to the following FAQ: https://qnap.to/3c9zfg.