Synology urges NAS updates as C3RB3R ransomware targets outdated software

First reported by BleepingComputer at · Updated · 5 sources

Attackers are exploiting a previously patched security flaw in DiskStation Manager to target Synology network-attached storage devices running outdated software. The company is urging customers to install updates as attacks increase. According to The Hacker News, the vulnerability was patched in December 2024, and attackers seek to encrypt data and demand ransom.

  • Cyber Security News reports that victims found encrypted files bearing the .L0CK3D extension.

Covered by 5 publishers within 30 hours of the first report.

Reporting5

BleepingComputer Synology warns of C3RB3R ransomware attacks targeting NAS devices · Sergiu Gatlan
Cyber Security News Hackers Exploit Patched Synology NAS Vulnerabilities to Deploy C3RB3R Ransomware and Encrypt Files · Abinaya
The Hacker News Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw · info@thehackernews.com (The Hacker News)
Security Affairs Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions · Pierluigi Paganini
TechRadar Synology NAS devices could be under attack from new ransomware threat — so update now · Sead Fadilpašić

Related

Artem Stryzhak sentenced to 70 months for ransomware attacks
3AM ransomware affiliate encrypts about 37 machines at UK schools
SafePay ransomware breached more than 600 organizations, agencies warn
UK cyber agency warns AI ransomware could hit infrastructure by 2028

Topics Ransomware