{"vulnerability": "CVE-2021-28799", "sightings": [{"uuid": "862d2503-c589-4fde-b733-829b566879ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/bb8198c3-2aee-4d3c-8b0f-e341fd1c7f0b", "content": "", "creation_timestamp": "2021-08-10T15:25:39.000000Z"}, {"uuid": "fe1d6eca-590e-4c97-b58e-14eff532012c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/fad396ea-c38c-4e15-a3e2-134eac72edc3", "content": "", "creation_timestamp": "2021-08-11T06:06:59.000000Z"}, {"uuid": "c404db11-2d8a-46a9-b116-051c175f945a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "content": "", "creation_timestamp": "2021-10-25T22:32:43.000000Z"}, {"uuid": "5a250290-a476-4a2b-a9f9-fb0b391fc126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "9b8bc6d3-dc8a-48a2-b54b-5036971b2db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/689a17aa-d88e-4ba6-986f-44cfa8533299", "content": "", "creation_timestamp": "2024-11-14T06:09:40.000000Z"}, {"uuid": "cc08bf93-9e67-41ec-ad1d-71921d186020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971490", "content": "", "creation_timestamp": "2024-12-24T20:30:05.163996Z"}, {"uuid": "36259119-1fc5-4c28-a8b2-8d657c0f6a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:30.000000Z"}, {"uuid": "6fc0edca-2cee-43a7-aec9-f2b64b97a398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://gist.github.com/daniruiz/962ecca527b59954e619c5ae2cab680c", "content": "", "creation_timestamp": "2025-07-10T08:13:41.000000Z"}, {"uuid": "45cbeaf1-c464-4b3b-82e8-6943c8928702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "b6c5d940-dba2-4c4e-b6b6-9d226f2e5b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28799.yaml", "content": "", "creation_timestamp": "2026-01-09T15:26:16.000000Z"}, {"uuid": "5d509aff-f36a-45b5-801f-c8784781c6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mc6gemhgae2p", "content": "", "creation_timestamp": "2026-01-11T21:02:57.326814Z"}, {"uuid": "38c03c10-f29d-4e72-90e7-7818b493111e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/334d27dc-c265-46df-93c4-62cae5eb5122", "content": "", "creation_timestamp": "2026-02-02T12:27:54.546425Z"}, {"uuid": "d9192727-5f91-4bd0-b004-58f1352915ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "6bc7738d-8d56-4ef8-85a9-a251eecdf32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/CyberGovIL/1383", "content": "Com13103 | [\u05e2\u05d3\u05db\u05d5\u05df] \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 QNAP\n\n\u05d7\u05d1\u05e8\u05ea QNAP \u05e4\u05e8\u05e1\u05de\u05d4 \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05de\u05e1\u05e4\u05e8 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d4\u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05dc\u05ea\u05e7\u05d5\u05e3 \u05d1\u05e9\u05d9\u05d8\u05d5\u05ea \u05e9\u05d5\u05e0\u05d5\u05ea \u05e6\u05d9\u05d5\u05d3 \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n2. [\u05e2\u05d3\u05db\u05d5\u05df] \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05d3\u05d5\u05d5\u05d7 \u05e2\u05dc \u05e7\u05de\u05e4\u05d9\u05d9\u05df \u05d4\u05e2\u05d5\u05e9\u05d4 \u05e9\u05d9\u05de\u05d5\u05e9 \u05d7\u05d5\u05d6\u05e8 \u05d1\u05d0\u05d7\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2021-28799) \u05dc\u05d4\u05ea\u05e7\u05e0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8\u05d4 QLocker \u05e2\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3.\n\n3. [\u05e2\u05d3\u05db\u05d5\u05df] \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05d1\u05d9\u05d5\u05ea\u05e8 \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2022-01-18T23:46:04.000000Z"}, {"uuid": "d344cfda-58c6-4f4b-81f3-d8ca0c18ce23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/CyberGovIL/1261", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9   Com6231 | QNAP\n\n\u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d7\u05d1\u05e8\u05ea QNAP  \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea \u05dc\u05d2\u05d1\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05d4.\n\n\u05d0\u05d7\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2021-28799), \u05d1\u05e8\u05db\u05d9\u05d1 HBS3 \u05d1\u05e6\u05d9\u05d5\u05d3 NAS  \u05de\u05ea\u05d5\u05e6\u05e8\u05ea \u05d4\u05d7\u05d1\u05e8\u05d4, \u05e0\u05d5\u05e6\u05dc\u05d4 \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05de\u05e4\u05e2\u05d9\u05dc\u05d4 \u05d0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8\u05d4 Qlocker.\n\n\u05e8\u05d0\u05d5 \u05d2\u05dd \u05e4\u05e8\u05e1\u05d5\u05de\u05e0\u05d5 https://www.gov.il/he/departments/publications/reports/qnap_1307.\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e0\u05d5\u05e1\u05e4\u05ea (CVE-2021-28798), \u05de\u05e1\u05d5\u05d2 Relative Path Traversal, \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05e9\u05d9\u05e0\u05d5\u05d9 \u05e7\u05d1\u05e6\u05d9\u05dd \u05e2\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3 \u05d1\u05d0\u05d5\u05e4\u05df \u05d4\u05e4\u05d5\u05d2\u05e2 \u05d1\u05e9\u05dc\u05de\u05d5\u05ea (Integrity) \u05d4\u05e6\u05d9\u05d5\u05d3.\n\n\u05d1\u05e0\u05d5\u05e1\u05e3 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea \u05dc\u05d2\u05d1\u05d9 \u05e4\u05e2\u05d9\u05dc\u05d5\u05d9\u05d5\u05ea \u05d7\u05e9\u05d5\u05d3\u05d5\u05ea \u05e9\u05e0\u05e6\u05e4\u05d5 \u05db\u05e0\u05d2\u05d3 \u05e6\u05d9\u05d5\u05d3 \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4, \u05e2\u05dc \u05d9\u05d3\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05de\u05e4\u05e2\u05d9\u05dc\u05d4 \u05d0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8\u05d4 eCh0raix, \u05d5\u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d4\u05e4\u05d5\u05e2\u05dc\u05d9\u05dd \u05db\u05e0\u05d2\u05d3 \u05e8\u05db\u05d9\u05d1 \u05e6\u05d3 \u05d2' \u05d1\u05e9\u05dd Roon Server, \u05d5\u05d4\u05de\u05dc\u05e6\u05d5\u05ea \u05db\u05d9\u05e6\u05d3 \u05dc\u05d4\u05ea\u05de\u05d5\u05d3\u05d3 \u05e2\u05d9\u05de\u05df.\n\n\u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d0\u05ea \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d7\u05d1\u05e8\u05ea QNAP. \u05d4\u05d5\u05e8\u05d0\u05d5\u05ea \u05dc\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e6\u05d9\u05d5\u05d3 \u05de\u05d5\u05e4\u05d9\u05e2\u05d5\u05ea \u05d1\u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05d4\u05de\u05e4\u05d5\u05e8\u05d8\u05d9\u05dd \u05d1\u05e1\u05e2\u05d9\u05e3 \"\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\" \u05dc\u05d4\u05dc\u05df.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05e4\u05e2\u05d5\u05dc \u05e2\u05dc \u05e4\u05d9 \u05d4\u05de\u05dc\u05e6\u05d5\u05ea \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0 \u05d4\u05e4\u05e2\u05d9\u05dc\u05d5\u05d9\u05d5\u05ea \u05d4\u05d7\u05e9\u05d5\u05d3\u05d5\u05ea. \u05e8\u05d0\u05d5 \u05d4\u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05d4\u05de\u05e4\u05d5\u05e8\u05d8\u05d9\u05dd \u05d1\u05e1\u05e2\u05d9\u05e3 \"\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\" \u05dc\u05d4\u05dc\u05df.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d4\u05d2\u05d1\u05d9\u05dc \u05d4\u05d2\u05d9\u05e9\u05d4 \u05dc\u05e6\u05d9\u05d5\u05d3 QNAP \u05dc\u05e8\u05e9\u05ea \u05d4\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05ea, \u05d5\u05d1\u05e4\u05e8\u05d8 \u05dc\u05de\u05e0\u05d5\u05e2 \u05d2\u05d9\u05e9\u05d4 \u05dc\u05e6\u05d9\u05d5\u05d3 \u05de\u05e8\u05e9\u05ea \u05d4\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05d0\u05dd \u05de\u05e1\u05d9\u05d1\u05d4 \u05e2\u05e1\u05e7\u05d9\u05ea \u05e0\u05d3\u05e8\u05e9\u05ea \u05d2\u05d9\u05e9\u05d4 \u05de\u05e1\u05d5\u05d2 \u05d6\u05d4, \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d9\u05d9\u05e9\u05de\u05d4 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e4\u05ea\u05e8\u05d5\u05df \u05db\u05d2\u05d5\u05df VPN \u05e2\u05dd \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d7\u05d6\u05e7\u05d4 \u05d5\u05d4\u05e6\u05e4\u05e0\u05d4 \u05de\u05ea\u05d0\u05d9\u05de\u05d4.\n\n\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-12\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-14\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-17\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-18", "creation_timestamp": "2021-05-23T16:44:35.000000Z"}, {"uuid": "7ed40ae9-0add-450f-8fc7-9de010af3104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/true_secator/2524", "content": "\u0411\u043e\u043b\u044c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f.\n \nQlocker \u0432\u043d\u043e\u0432\u044c \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 QNAP Network Attached Storage (NAS) \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u041d\u043e\u0432\u0430\u044f ransomware-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f QLocker2 \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0430 6 \u044f\u043d\u0432\u0430\u0440\u044f. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u0432 Tor \u0438 \u0443\u0437\u043d\u0430\u0442\u044c \u0441\u0443\u043c\u043c\u0443 \u0432\u044b\u043a\u0443\u043f\u0430, \u0437\u0430\u043f\u0438\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0438\u0434\u0435 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 !!!READ_ME.txt.\n \n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, QLocker2 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0435\u0442 \u0432\u0441\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 NAS \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0430\u0440\u0445\u0438\u0432\u044b 7z \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0443\u043f\u043b\u0430\u0442\u044b \u0432\u044b\u043a\u0443\u043f\u0430. \u041a\u0430\u043a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c, \u0441\u0443\u043c\u043c\u0430 \u0432\u044b\u043a\u0443\u043f\u0430 \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0435 \u043e\u0442 0,02 \u0434\u043e 0,03 \u0431\u0438\u0442\u043a\u043e\u0439\u043d\u043e\u0432.\n \n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0446\u0435 \u0430\u043f\u0440\u0435\u043b\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043e \u043d\u043e\u0432\u044b\u0439 \u0448\u0442\u0430\u043c\u043c ransomware \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Qlocker, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u0437\u0430\u0440\u0430\u0436\u0430\u043b\u0430 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP NAS. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 CVE-2021-28799, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0438\u043c \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 NAS.\n \n\u041f\u043e\u0445\u043e\u0436\u0435 \u0432 \u043c\u0430\u0435 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a QNAP \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f HBS 3, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 (NAS), \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f Qlocker.\n \n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0437 Intezer \u0438 Anomali \u0432\u044b\u044f\u0432\u043b\u044f\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a ech0raix. \u041c\u0430\u043b\u0432\u0430\u0440\u044c \u0431\u044b\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 2019 \u0433\u043e\u0434\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f Roon Server.\n \n\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f QLocker2. \u041f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u0447\u0435\u043c \u043e\u043d\u0430 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u043e \u043f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a NAS \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f. \u041d\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u043e\u0436\u0435 \u043d\u0435 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442.\n \n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 ID-Ransomware \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0442 \u0436\u0435\u0440\u0442\u0432 QLocker2. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0440\u0430\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 QNAP \u043f\u043e\u0442\u0435\u0440\u044f\u043b\u0438 \u043e\u043a\u043e\u043b\u043e 350 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 (\u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u0435 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u044b\u043a\u0443\u043f\u0430 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 0,01 \u0431\u0438\u0442\u043a\u043e\u0439\u043d\u0430), \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c \u043b\u0438\u0448\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a.", "creation_timestamp": "2022-01-17T09:36:31.000000Z"}, {"uuid": "bb69b4dc-e82d-451b-8a2e-39c772eec836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "content": "", "creation_timestamp": "2026-05-11T00:00:00.000000Z"}, {"uuid": "58ed7b76-4b37-4b9c-b221-7d26adaa4a26", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d03960d5-0e9e-4edb-af2e-69e8c4893036", "content": "", "creation_timestamp": "2026-06-19T12:47:20.438346Z"}, {"uuid": "f2197360-e4c8-4218-891d-9ba41034ea78", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5397be0-4029-4e3d-a7f4-5acd55268011", "content": "", "creation_timestamp": "2026-06-23T14:05:16.773547Z"}, {"uuid": "0d1d3175-892b-47f8-92f4-2ab08fa0e266", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5388cdd5-2363-4b7c-a33e-851e8b3c31fb", "content": "", "creation_timestamp": "2026-06-30T09:22:55.329055Z"}, {"uuid": "68dce353-192f-45ef-a89d-f1236a114014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/fad396ea-c38c-4e15-a3e2-134eac72edc3", "content": "", "creation_timestamp": "2026-07-11T06:15:04.370117Z"}, {"uuid": "b8e1092c-2f3a-48cc-a52a-b26698ef5c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/fad396ea-c38c-4e15-a3e2-134eac72edc3", "content": "", "creation_timestamp": "2026-07-12T00:15:03.025247Z"}, {"uuid": "83754d62-2abf-4dff-b277-302f232a5d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:59.525425Z"}, {"uuid": "57815337-39fd-4a6b-8408-3f9d7c887471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:21.949602Z"}, {"uuid": "932991ac-0996-4962-9fe5-5f45c779a6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T13:00:05.150480Z"}, {"uuid": "dd052a88-fbd9-466f-81db-b6f725a05030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:14.311182Z"}]}