According to research reports, and NAS devices storage devices backup are vulnerable to ransomware attacks. The number of ransomware attacks has increased, while users “unprepared” for this significant threat.
Ransomware comes in many forms. It is typically used to attack corporate networks and critical services (e.g. hospitals, utilities, and individuals).
Once the ransomware is installed on the victim's system, it begins encrypting files and sending a message demanding a ransom.
Of course, there is no guarantee that paying will lead to the decryption of files. However, many victims decide to pay the money because they believe that it will help them recover their files. Especially when it comes to critical data from services, such as hospitals, government organizations, etc., the ransom is even more likely to be paid.
The average company will face a attack at some point. Typically, hackers launch attacks with phishing emails, while also using exploit kits and other malware.
Kaspersky researchers claim that NAS devices are directly threatened by ransomware.
NAS systems are used by many businesses and individuals and are very useful for storing backups.
However, attackers can gain access to these devices, as user authentication is sometimes bypassed due to vulnerabilities in the software.
Ransomware developers have recognized the vulnerabilities and have increased their attacks. Last year, NAS devices were not a major target for hackers. Now, however, they have found ways to exploit them.
First, hackers scan the internet for exposed NAS devices. Then, they use exploits to exploit vulnerabilities and if they manage to breach the systems, they install malware and begin encrypting the device's files.
According to a Kaspersky report, many new ransomware variants have appeared in the last year, which shows that cybercriminals are very interested in this malware and are constantly developing it.
Researchers say WannaCry remains the most popular form of ransomware, followed by Phny and GandCrypt.
“This year we have identified several new ransomware families that are focused exclusively on NAS devices,” said Fedor Sinitsyn, a security researcher at Kaspersky. “This trend is unlikely to fade, as this attack is proving to be very profitable for attackers, especially since users are completely unprepared.”.
