Synology Warns of C3RB3R Ransomware Targeting NAS Devices
First merged summary.
C3RB3R ransomware encrypts Synology NAS files using 2024 vulnerabilities; users urged to update DSM immediately.
Synology warned of ongoing C3RB3R ransomware attacks on NAS devices exploiting unpatched DSM vulnerabilities patched in December 2024. Files were encrypted with the .L0CK3D extension, per reports from the 360 Security Team and Solar Emergency Response Team. Synology-SA-24:20 details three CVEs allowing remote code execution, file reading, and writing. Public reports did not establish the exploited vulnerability or number of affected devices. Users should update DSM to 7.2.2-72806-1 or higher, enable automatic updates, and block the management interface from the internet.
- C3RB3R ransomware encrypts files with .L0CK3D extension on Synology DSM
- CVEs patched in DSM 7.2.2-72806-1 and 7.2.1-69057-6: CVE-2024-10441 (CVSS 9.8), CVE-2024-50629, CVE-2024-10445
- Synology urges automatic DSM updates and internet blocking of management interface
- Entry point for attacks remains unknown per public reports
- 360 Security Team and Solar Emergency Response Team reported incidents
- No confirmed number of affected devices
What each outlet adds
beyond the shared facts- BleepingComputerSynology official warning and specific DSM update instructions
- Cyber Security NewsRansomware .L0CK3D extension details and reporting teams
- Vendors
- Synology
- Products
- DSMDiskStation Manager
- Threat actors
- C3RB3R
- Malware
- C3RB3R
- Victims
- Synology customers
- Organizations
- AppinnSolar Emergency Response Team
- Countries
- Taiwan
Coverage
oldest first · one row per article · UTC- · 15h ago
BleepingComputerFirst report
Synology warns of C3RB3R ransomware attacks on NAS devices
C3RB3R ransomware exploits unpatched DSM vulnerabilities to encrypt data on Synology NAS devices; users urged to update immediately.
- · 15h ago
Cyber Security News
Synology NAS hit by C3RB3R ransomware using 2024 flaws
C3RB3R ransomware encrypts files with .L0CK3D extension on Synology DSM devices after exploitation of 2024 vulnerabilities
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-10441+2 related CVEs | Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation… | 9.8 group max | 1% |