QSnatch
- Malware type
- credential-stealer
- Family
- Malware family
- Profile updated
- 2026-07-07 13:46:30
Targeted industries: technology-and-telecommunications
Context
The malware infects QNAP NAS devices, is persisting via various mechanisms and resists cleaning by preventing firmware updates and interfering with QNAP MalwareRemover. The malware steals passwords and hashes
Reports & references
- Trend Micro — Wp Backing Your Backup Defending Nas Devices Against Evolving Threats (report)
- Trend Micro — The Evolution Of Iot Linux Malware Based On Mitre Att&Ck Ttps (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Qsnatch (report)
- kyberturvallisuuskeskus.fi — Qsnatch Malware Designed Qnap Nas Devices (report)
- CISA — Aa20 209A (report)
- ncsc.gov.uk — Ncsc%20Cisa%20Alert%20 Qnap%20Nas%20Devices (report)
- bin.re — The Dga Of Qsnatch (report)