🐜 ⬅️ 📟 How to protect NAS from hacker attacks and ransomware? 🧜🏼 👼 🤚🏿

Everyone has heard the scandal associated with the Qlocker hacker group, which wrote an encryption program that penetrates network storages. Since April 20, the number of victims of the ransomware goes to hundreds a day. Hackers use vulnerability CVE-2020-36195, the program infects NAS and encrypts information. The data can only be decrypted after the ransom. Fortunately, Synology NAS does not have this vulnerability. But we still felt it necessary to talk about how you should protect your NAS to avoid potential risks.

We also recommend that you familiarize yourself with the guidelines for protecting data on users' computers from encryption programs .

Note: Most of the tips in this article require NAS administrator rights.

Tip 1: disable the default administrator account

Common administrator account names make it easier for hackers to brute-force attacks on your Synology NAS through brute force attacks. Avoid names like admin, administrator, root (*) when setting up your NAS. We recommend that you generate a strong and unique password for the administrator of your Synology NAS and disable the default administrator account . If you set up an administrative account with a new name when configuring the NAS, the admin account will be automatically disabled.

If you are logged in as admin user, then go to Control Panel , select User and group , and then create a new administrative account. Then login under the new entry and disable admin.