Taiwanese-based vendor Synology has warned customers that the StealthWorker botnet is conducting brute-force attacks in an attempt to implant ransomware. The company urges its customers to enable multi-factor authentication where available, enable auto block and account protection, and to use string administrative credentials. The vendor reporting its findings with relevant CERTs and is working with them to dismantle the C&C (command and control) infrastructure behind the malware. The bot is a Golang-based malicious code that targets Windows and Linux servers running popular web services and platforms.”]
Source: https://securityaffairs.co/wordpress/120962/malware/synology-nas-devices-ransomware.html