Qlocker's decision appears to have paid off as the payments have started to rush in earning the threat actors a sizeable return for a few days of activity. However, paying $500 can be seen as a small price to pay to recover important files, no matter how violated a victim may feel. It seems that the threat actors knew their targets well as they priced their ransom demands at only 0.01 Bitcoins, or at today's Bitcoin prices, approximately $500.ĭeciding to pay millions of dollars requires a company to think hard about whether the lost data is worth millions of dollars. However, Qlocker chose a different target - consumers and small-to-medium business owners utilizing QNAP NAS devices for network storage. Ransom demands were priced correctlyĮnterprise-targeting ransomware usually demands ransom payments ranging from $100,000 to $50 million to decrypt all of a victim's devices and not leak their stolen data.
#7zip password encryption archive#
Using such a simple approach allowed them to encrypt over a thousand, if not thousands, of devices in just five days using a time-tested encryption algorithm built into the 7zip archive utility.
#7zip password encryption password#
These exploits allowed the threat actors to remotely execute the 7zip archival utility to password protect all the files on victims' NAS storage devices. Instead, they scanned for QNAP devices connected to the Internet and exploited them using the recently disclosed vulnerabilities. While most ransomware groups put considerable development time in their malware to make it efficient, feature-rich, and have strong encryption, the Qlocker gang didn't even have to create their own malware program. Starting on Monday, QNAP NAS users from all over the world suddenly found their files encrypted after a ransomware operation called Qlocker exploited vulnerabilities on their devices. A ransomware gang has made $260,000 in just five days simply by remotely encrypting files on QNAP devices using the 7zip archive program.
0 kommentar(er)
