myQNAPcloud, the cloud service provided by QNAP Systems for remote NAS connectivity, has allegedly been targeted in a data sale on a cybercrime forum. A threat actor claims to have obtained “internal access” to the service and is attempting to sell it for $400. While the actor showcases screenshots of a specific QNAP NAS device interface (TS-228), their listing asserts a broader compromise of the myQNAPcloud platform.
According to the actor, the unauthorized access allegedly provides entry to sensitive information. The claimed data includes:
-
Document data
-
User details
-
Approximately 1.7TB of stored data
