Deadbolt Ransomware is Back

Censys observed and tracked the Deadbolt ransomware campaign that targets QNAP QTS NAS devices (and reported ASUSTOR incidents), which encrypts backup directories and defaces the web administration interface; at peak in January 2022 thousands of devices were infected (4,988 observed), ransoms and wallet addresses were tracked, QNAP issued a firmware update, and infections resurged in March 2022 prompting continued monitoring.