New eCh0raix Ransomware targets QNAP devices

imhotep

Well-known member
  • Mar 29, 2017
    14,829
    8
    35,349
    113
    For the first time eCh0raix ransomware uses a brute-force credential attack to gain access to QNAP NAS devices.
    This has been named eCh0raix as there is a string containing this name in the source code. A strange feature of it is that there seems to be a unique hard-coded public key for each target.
    Apparently it is based on Go and uses less than 400 lines of code. The Go language is now fast becoming a threat in the creation of malware.
    Another feature of eCh0raix is that it does a check on the language used on the system, and will not encrypt for regions of Belarus, Ukraine, and Russia.
     
    Last edited:
    • Like
    Reactions: Djice

    Candid-B

    Well-known member
  • Apr 25, 2019
    34,198
    1
    59,410
    113
    Mother Earth
    Time to learn some GO. It's like the new shit now.
    Don't think that this kind of threads are valued here. :dull:

    why do you think so ? :) Besides, can't we write in all known language like c++ programs to prevent any other compiled malicious programs written by using Go language?
     

    Djice

    Well-known member
  • Jan 17, 2011
    4,409
    3,778
    113
    out of fucked up land
    why do you think so ? :) Besides, can't we write in all known language like c++ programs to prevent any other compiled malicious programs written by using Go language?

    Like I said, GO is becoming/has become something big already.
    Personally, I want to write some Prometheus exporters (used for monitoring). Most of the exporters for Prometheus are written in GO.
     
    • Like
    Reactions: imhotep

    imhotep

    Well-known member
  • Mar 29, 2017
    14,829
    8
    35,349
    113
    Like I said, GO is becoming/has become something big already.
    Personally, I want to write some Prometheus exporters (used for monitoring). Most of the exporters for Prometheus are written in GO.

    You are correct...:yes: