{"id":3541,"date":"2022-01-26T10:54:06","date_gmt":"2022-01-26T09:54:06","guid":{"rendered":"https:\/\/sajberinfo.com\/2022\/11\/21\/text-82\/"},"modified":"2022-12-04T13:25:29","modified_gmt":"2022-12-04T12:25:29","slug":"deadbolt-ransomware-napada-qnap-nas-uredjaje","status":"publish","type":"post","link":"https:\/\/sajberinfo.com\/en\/2022\/01\/26\/deadbolt-ransomware-napada-qnap-nas-uredjaje\/","title":{"rendered":"DeadBolt ransomware napada QNAP NAS ure\u0111aje"},"content":{"rendered":"
\"DeadBolt

DeadBolt<\/em> ransomware<\/p><\/div>\n

Internet stranica BleepingComputer<\/a><\/em>j e ju\u010de objavila da DeadBolt ransomware<\/em> napad na QNAP NAS <\/em>ure\u0111aje uz pretpostavku da se radi o zero-day<\/em> ranjivosti ure\u0111aja. Napadi na korisnike su po\u010deli 25. januara, a korisnici na ure\u0111ajima pronalaze enkriptovane dokumente sa ekstenzjiom \u201c.deadbolt<\/em>\u201d. Umjesto uobi\u010dajene poruke u svakom folderu na ure\u0111aju, preuzeta je QNAP<\/em> stranica za prijavu na ure\u0111aj, umjesto koje se prikazuje poruka upozorenja da se radi o\u00a0 ransomware<\/em> napadu i da napada\u010di zahtijevaju 0,03 bitcoin<\/em>-a (oko $<\/i>1.100).<\/span><\/p>\n

\"Ransom

DeadBolt <\/em>ransom note, Source: Twitter<\/a><\/em><\/p><\/div>\n

Kompanija QNAP<\/em> se oglasila danas sa upozorenjem svim korisnicima<\/a> da za\u0161tite svoje ure\u0111aje koji su dostupni preko Interneta. Ukoliko korisnici u Security Counselor<\/em>-u vide poruku: \u201eThe System Administration service can be directly accessible from an external IP address via the following protocols: HTTP<\/em>\u201c ure\u0111aj\u00a0 je sa visokim rizikom izlo\u017een napadu. Korisnicima se preporu\u010duje da odmah preuzmu posljednje dostupno a\u017euriranje, kako bi zaustavili DeadBolt ransomware<\/em> napad. Korisnici koji imaju NAS<\/em> ure\u0111aje izlo\u017eene na Internetu bi trebali odmah preuzeti sljede\u0107e korake kao bi se za\u0161titili:<\/span><\/p>\n

– Onemogu\u0107iti Port Forwarding <\/em>na ruteru za podrazumijevane portove 8080 i 433.<\/span><\/span><\/p>\n

– Onemogu\u0107iti UPnP<\/em> fukciju na QNAP NAS<\/em> ure\u0111ajima tako \u0161to \u0107e u QTS <\/em>meniju oti\u0107i na myQNAPcloud i kliknuti na “Auto Router Configuration<\/em>\u201c i od\u010dekirati opciju “Enable UPnP Port forwarding<\/em>\u201c<\/i>.<\/span><\/span><\/p>\n

Korisnci bi tako\u0111er terbali da izsklju\u010de SSH <\/em>i Telnet<\/em>, promjene sistemski port i lozinku za pristup ure\u0111aju. Detaljnije upustvo ovdje<\/a>.<\/span><\/span><\/p>","protected":false},"excerpt":{"rendered":"

Internet stranica BleepingComputerj e ju\u010de objavila da DeadBolt ransomware napad na QNAP NAS ure\u0111aje uz pretpostavku da se radi o zero-day ranjivosti ure\u0111aja. Napadi na korisnike su po\u010deli 25. januara, a korisnici na ure\u0111ajima...<\/p>","protected":false},"author":1,"featured_media":3597,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[93,131,132,133,65,64],"class_list":["post-3541","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hronike","tag-malware","tag-nas","tag-qnap","tag-ransomware","tag-rezervna-kopija","tag-sajber-prijetnja"],"_links":{"self":[{"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/posts\/3541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/comments?post=3541"}],"version-history":[{"count":0,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/posts\/3541\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/media\/3597"}],"wp:attachment":[{"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/media?parent=3541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/categories?post=3541"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/tags?post=3541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}