Synology warns of C3RB3R ransomware attacks on NAS devices
Original title: Synology warns of C3RB3R ransomware attacks targeting NAS devices
C3RB3R ransomware exploits unpatched DSM vulnerabilities to encrypt data on Synology NAS devices; users urged to update immediately.
Synology warned customers of ongoing C3RB3R ransomware attacks targeting their NAS devices. The company identified threat actors exploiting vulnerabilities patched in December 2024. Users are urged to update DSM software to the latest version and enable automatic updates.
Unconfirmed: Specific vulnerability exploited is not named by Synology.
- Update DSM to 7.2.2-72806-1 or above
- Block management web interface from Internet
- Enable automatic updates
Impact: data encryption and extortion via ransom note
- 1.update DSM to latest version
- 2.enable automatic updates
- 3.block management web interface from the Internet
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-10441+2 related CVEs | Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation… | 9.8 group max | 1% |
From the original article
3 min read at bleepingcomputer.com
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.