The Neverending Story of Deadbolt

This Censys report documents a large, active Deadbolt ransomware campaign against QNAP NAS devices: researchers observed a rapid spike to ~19,000 infected hosts in early September 2022, tracked infections by IP/ASN/country, extracted embedded BTC ransom addresses and identified two variants. The report also notes exploitation of a Photo Station zero-day (CVE-2022-27593), provides a dashboard for ongoing tracking, and outlines infection cadence and affected populations.