NAS ransomware: ransomware targeting NAS devices

The present study examines the impact of ransomware against Network Attached Storage (NAS) devices. NAS devices are external harddrives which are usually easily accessible through the internet. We analyse 502 ransomware attacks reported to the Dutch Police between 2019 and 2022, of which 104 (20.7%) targeted NAS devices. These attacks targeted both companies as individuals. Furthermore, we examine the police intervention against a NAS ransomware strain in October 2022. One limitation of this sample is possible low willingness to report to the Police. We conclude that, although the financial impact of an attack on an individual is relatively low compared to an attack against an organisation, the loss of personal pictures and videos can be very painful for victims and therefore we think it is important to address NAS ransomware in the public debate.