Synology NAS hit by C3RB3R ransomware using 2024 flaws
Original title: Hackers Exploit Patched Synology NAS Vulnerabilities to Deploy C3RB3R Ransomware and Encrypt Files
C3RB3R ransomware encrypts files with .L0CK3D extension on Synology DSM devices after exploitation of 2024 vulnerabilities
Synology NAS devices faced C3RB3R ransomware attacks linked to 2024 security flaws in DiskStation Manager. The 360 Security Team and Solar Emergency Response Team reported incidents where files were encrypted with .L0CK3D. Synology-SA-24:20 covers CVE-2024-10441 allowing unauthenticated remote code execution, CVE-2024-50629 for file reading, and CVE-2024-10445 for file writing. Public reporting did not establish which vulnerability was used or the number of affected devices.
Unconfirmed: The exact attack entry point and whether a new zero-day vulnerability was used remain unknown.
- CVE-2024-10441 has CVSS score 9.8
- Fixed DSM versions include 7.2.2-72806-1 and 7.2.1-69057-6
- Ransomware uses .L0CK3D extension
- Entry point for attacks remains unknown
- Appinn recommends offline backups and VPN access
Impact: ransomware encryption of files with .L0CK3D extension
- 1.Update to latest DSM release
- 2.Enable two-factor authentication
- 3.Use VPN for remote DSM access
- Vendors
- Synology
- Products
- DiskStation Manager
- Malware
- C3RB3R
- Organizations
- AppinnSolar Emergency Response Team
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-10441+2 related CVEs | Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation… | 9.8 group max | 1% |
From the original article
2 min read at cybersecuritynews.com
Synology NAS devices are facing C3RB3R ransomware attacks linked to 2024 security flaws, prompting the company to urge users to update outdated DiskStation Manager versions and packages. The warning followed reports from the 360 Security Team and Solar Emergency Response Team on October 29. Victims found their files encrypted with the .
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.