Researchers discovered hackers trying to exploit the Shellshock Bash vulnerability to compromise network attached storage devices in universities in the U.S., Japan and Korea. The attackers were taking advantage of a publicly disclosed security weakness in which the web servers embedded in the devices manufactured by QNAP have administrative privileges by default. The attacks are the first FireEye has seen targeting NAS devices, which would be desirable targets, because of the amount of data stored in them. The top domain under attack was online gaming with consumer electronics and online email marketing a distant second and third.”]
Source: https://www.csoonline.com/article/2690814/shellshock-attackers-targeting-nas-devices.html