QNAP Warns Users of Bitcoin Miner Targeting Their NAS Devices

upstart writes:

QNAP warns users of bitcoin miner targeting their NAS devices:

QNAP warned customers today of ongoing attacks targeting their NAS (network-attached storage) devices with cryptomining malware, urging them to take measures to protect them immediately

The cryptominer deployed in this campaign on compromised devices will create a new process named [oom_reaper] that will mine for Bitcoin cryptocurrency.

While running, the malware can take up to 50% of all CPU resources and will mimic a kernel process with a PID higher than 1000.

[...] QNAP also recommends customers take the following measures to protect their devices from these attacks:

1. Update QTS or QuTS hero to the latest version.
2. Install and update Malware Remover to the latest version.
3. Use stronger passwords for your administrator and other user accounts.
4. Update all installed applications to their latest versions.
5. Do not expose your NAS to the internet, or avoid using default system port numbers 443 and 8080.

You can find detailed information on the steps required for each of the actions above in today's security advisory.

Original Submission

Read more of this story at SoylentNews.