Hacked NAS326

danko

I dont know how (I have a very strentgh password, and last firmware instaled)...but someone haked my NAS326.
All files in all folders are crypted and in every folder there are a txt file !CHECKMATE_DECRYPTION_README with instructions for paying 560USD for uncrypt....
Is there are some solution for saveng files?
Thank you

ikubuf

It normally gets polluted once that malicious file has been loaded onto an endpoint/laptop/pc，there are variety of methods for infecting your device, whether it’s an attachment in an email, a link sent via spam, it spreads to the network.

Have you ever done the backup on your NAS?
If so, you could delete the volume and reset your NAS.
After done reset and cleaning the volume, you can restore the backup back to the NAS.

There is a simple way to secure your NAS, you can refer to the article
https://community.zyxel.com/en/discussion/14579/best-practices-to-secure-your-nas#latest

Pacwin

I have had exactly the same thing occur to me on the 14th of October.

I have a separate backup on another drive, trying to recover this at the moment.