Data is encrypted and “README” text file left

最後修訂日期: 2022-06-24

Applied models:

All NAS Series

Applied Firmware:

All QTS Firmware Versions

When found data/files are encrypted and there is a message text in the folder(or every folder) to let the user know how to get the decrypting method. User could recover data via snapshot or from previous backed up data. It is recommended to re-initialize NAS and apply the following security measures to prevent from future reoccurrance:

manage accounts and confirm they are known users
manage applications(QPKG) and prevent unknown app
disable auto router configuration and set up device access controls in myQNAPcloud (don’t open SSH or telnet to internet)
avoid default ports to the Internet.
install and run the latest version of Malware Remover.
change passwords for all accounts every few months or half a year
update QTS to the latest available version/ installed QTS applications to the latest versions.
install QuFirewall and secure the NAS from unknown access attempts
please refer to QNAP Security Advisory newsletter.

Note: If the found data/files are encrypted with the .7z extension and !!!READ_ME.txt!!! is found in the same folder, please follow the instructions in the link below.
What should I do when found nas is encrypting my files by 7z?

Related link