URGEND: received an email with this !!! ALL YOUR FILES HAVE BEEN ENCRYPTED !!!

[ppeter1]

Hi!

received an email with this - I cannot access the Qnap via browser again
!!! ALL YOUR FILES HAVE BEEN ENCRYPTED !!!

how can I recover it again, is there a remover tool, what steps should be done!
the
Peter

I found this here
https://www.cybercrimepolice.ch/de/fall ... inspielen/
!!! ALL YOUR FILES HAVE BEEN ENCRYPTED !!!

All your files were encrypted using a private and unique key generated for the computer. This key is stored in our server and the only way to receive your key and decrypt your files is making a Bitcoin payment.

To purchase your key and decrypt your files, please follow these steps:

1. Dowload the Tor Browser at "https://www.torproject.org/". If you need help, please Google for "access onion page".

2. Visit the following pages with the Tor Browser:

[Guapo81]

Hi!

received an email with this - I cannot access the Qnap via browser again
!!! ALL YOUR FILES HAVE BEEN ENCRYPTED !!!

how can I recover it again, is there a remover tool, what steps should be done!
the
Peter

I found this here
https://www.cybercrimepolice.ch/de/fall ... inspielen/
!!! ALL YOUR FILES HAVE BEEN ENCRYPTED !!!

All your files were encrypted using a private and unique key generated for the computer. This key is stored in our server and the only way to receive your key and decrypt your files is making a Bitcoin payment.

To purchase your key and decrypt your files, please follow these steps:

1. Dowload the Tor Browser at "https://www.torproject.org/". If you need help, please Google for "access onion page".

2. Visit the following pages with the Tor Browser:

You can read all about it in the almost impossible to miss topic about Qlocker ->
viewtopic.php?f=45&t=160849 - [RANSOMWARE] 4/20/2021 - QLOCKER

[dolbyman]

news to me that uusers got an email though ... thought it was just txt files

[Guapo81]

news to me that uusers got an email though ... thought it was just txt files

That looks like something new indeed.

The thing that surprises me though is the fact that qlocker is still creating victims.
Thought that QNAP had plugged the holes by now, since presumably the vector of Qlocker was a zero-day leak?..

Anyway, also the message of NOT simply exposing your NAS to the WAN, without a decent security setup, should pretty much had reached all QNAP users by now, I would think.

[dolbyman]

qnap is patching holes left and right..but its a cat and mouse game ... so pretty sure the latest wave is just a different exploit used