Data is encrypted and “README” text file left
Last modified date:
2022-06-24
Applicable Products:
- All NAS series
When found data/files are encrypted and there is a message text in the folder(or every folder) to let the user know how to get the decrypting method. User could recover data via snapshot or from previous backed up data. It is recommended to re-initialize NAS and apply the following security measures to prevent from future reoccurrance:
- manage accounts and confirm they are known users
- manage applications(QPKG) and prevent unknown app
- disable auto router configuration and set up device access controls in myQNAPcloud (don’t open SSH or telnet to internet)
- avoid default ports to the Internet.
- install and run the latest version of Malware Remover.
- change passwords for all accounts every few months or half a year
- update QTS to the latest available version/ installed QTS applications to the latest versions.
- install QuFirewall and secure the NAS from unknown access attempts
- please refer to QNAP Security Advisory newsletter.
Note1: If the found data/files are encrypted with the .7z extension and !!!READ_ME.txt!!! is found in the same folder,please follow the instructions in the link below.
What should I do when found nas is encrypting my files by 7z?
Note2: If the found data/files are encrypted with the .encrypt extension and README_FOR_DECRYPT.txt is found in the same folder,please follow the instructions in the link below.
Related link
What is the best practice for enhancing NAS security?
