“Once a NAS is infected, CPU usage becomes unusually high where a process named ‘[oom_reaper]’ could occupy around 50% of the total CPU usage. This process mimics a normal, legitimate kernel process with the same name. However, while the legitimate kernel process PID is usually below 1000, the bitcoin miner PID is usually greater than 1000,” the company explained.
How to remove the bitcoin miner and protect your QNAP NAS?
Network-attached storage (NAS) devices are often used by consumers and small-to-medium businesses for storing and sharing files and/or backups, and they are often exposed to the public internet.
