{"uuid": "932991ac-0996-4962-9fe5-5f45c779a6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T13:00:05.150480Z"}