Can not access qnap gui on LAN

[Krssubbu1]

Hi

I have a QNAP NAS and certificates have expired and not able to login via web. I tried logging in With https://192.168.x.c and still can’t seem to

How do I login when certa have expired?

I can access via SMB file share

Thanks

[dolbyman]

use a browser that let's you access websites with invalid certs (firefox does for sure)

sure you had a valid certificate for your private IP ?

[Krssubbu1]

Yeah tried that too no joy!

It looks like the folder “web” is messed up

[dolbyman]

was your qnap exposed to the web?

you might have been hacked

[Krssubbu1]

Not sure how can I rectify this?

[dolbyman]

any funny files visible in your smb mounts ?

maybe ending in .muhstik ?

[Krssubbu1]

Nope!

I did expose it on https even if I exposed it so would hackers be able decrypt certs?

[dolbyman]

https is only securing/authenitcating the connection against eavesdropping.. it has no other security benefits

[krssubbu]

ok what is the way to sort this out?

I cant login via app too

[krssubbu]

this is what I get;


Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET /.
Reason: Error reading from remote server

[krssubbu]

actually just checked and yes I do see MUHSTICK files....omg how do I retrieve my data?

[dolbyman]

see here
https://www.bleepingcomputer.com/news/s ... tion-keys/
viewtopic.php?t=150861

if you are lucky .. your decrypt key was part of the 'counterhack' .. if not you need to restore from backups

[Krssubbu1]

Thanks, will check for mine but so I install decry software in NAS and run it?

Panicking here as I don’t have backup too

[dolbyman]

as we dont even know your nas model..hard to say

from what I have read, the original decrption tool was only made for one device type (cant remember what type..probably HAL x64)

but some security company also released other versions ..should all be in the linked threads

[krssubbu]

i do see my decrypt key there but when I download the software I see only "decrypt" file - should I upload this to NAS and ssh to NAS and run this? which location do I add the file on the NAS