Zspace (极空间) NAS Security Guide — Ransomware Posture for Beijing Tiandingxing (天顶星)'s Platform

Zspace (极空间, by Beijing Tiandingxing (天顶星)) has no recorded ransomware campaign as of October 2026 — the brand is either new or regionally concentrated, so it simply hasn't been a mass target yet. History says the next campaign will pick whichever vendor pairs the largest internet-exposed base with the slowest patch adoption. Zspace's consumer NAS line has no recorded ransomware campaign. The closed ZOS ships vendor-managed updates; the biggest realistic risks are the classic pair — exposed remote access and unapplied updates.

The platform reality

Zspace's built-in remote access (no public IP needed) is a relay-style design that avoids direct admin exposure — safer than port-forwarding. Keep ZOS updated via the vendor's OTA, and still build the off-box 3-2-1 copy; a turnkey box is not a backup strategy.

Lockdown (same 12 steps, this platform's words)

1. OS current — vendor OTA/app-store updates on, applied.
2. Remote access via relay/VPN, never a forwarded admin port.
3. Strong unique admin password + 2FA where offered.
4. One backup that leaves the box — USB rotated offline, or cloud/versioned sync (3-2-1).

Full detail: the 12-step checklist works identically on Zspace. Hit already? Recovery guide.

Is Zspace safer than Synology or QNAP?

It has no ransomware history — because it hasn't been a mass target, not because its walls are proven. Every campaign in history hit the vendor with the biggest exposed, unpatched base. Run the checklist and your risk is lower than an unpatched anything.

What should Zspace owners do about the October 2026 news?

Nothing brand-specific — the C3RB3R campaign targets Synology DSM builds. But it's the perfect trigger to audit your own box: OS version, remote-access method, backup that leaves the NAS. Twenty minutes, once.