What should I do when found nas is encrypting my files by 7z?

Last modified date: 2022-06-24

Applied models:

All NAS Series

Applied Firmware:

All QTS Firmware Versions

We believe that the attack is related to CVE-2020-36195 and CVE-2021-28799:

https://www.qnap.com/en/security-advisory/qsa-21-11
https://www.qnap.com/en/security-advisory/qsa-21-13

We strongly recommended updating your NAS Firmware, Malware Remover, Multimedia Console, HBS3 Hybrid Backup Sync and Media Streaming Add-on to the latest version, as well as changing the default web port 8080 (And please do not reboot or shutdown the NAS). If you are using legacy models with firmware version 4.2.6 and HBS2, they would not be affected by the above attack.

If your data have been encrypted, you may follow the instructions below to attempt recovery of encrypted files:
Manually Install QRescue to recover Qlocker-encrypted files on QNAP NAS

Was this article helpful?

Yes. No.

30% of people think it helps.

หากต้องการความช่วยเหลือเพิ่มเติม สอบถามผู้ใช้รายอื่นและผู้เชี่ยวชาญของ QNAP ได้ในคอมมูนิตี้ ไปที่ QNAP Community

Please tell us how this article can be improved:

The article is missing important information
The article's solutions do not work
The article is too complicated
The article contains incorrect information
The article is out-of-date

If you want to provide additional feedback, please include it below.