UnityMiner Exploits Unpatched QNAP NAS Devices in Cryptocurrency Mining Campaign

Threat actors are exploiting two unauthorized remote command execution vulnerabilities, tracked as CVE-2020-2506 & CVE-2020-2507, in the Helpdesk app which were fixed by the vendor in October 2020.