Synology ransomware targets outdated DSM as flaw remains unknown
Synology says attackers are using a vulnerability patched in December 2024 to target NAS devices running outdated DiskStation Manager (DSM), but has not identified which of three flaws in its November advisory is involved. The company says the attacks aim to encrypt data and extort ransom. The Hacker News reports that customers have also described C3RB3R infections.
Synology’s advisory lists fixes across five DSM branches, from 6.2 through 7.2.2, but does not tie the attacks to a specific vulnerability. Treating one listed flaw as the answer may leave devices on outdated branches exposed; reporting does not establish whether backups or connected systems were reached.
For organizations or households with shared files on a NAS, encryption can interrupt access to those files. The relevant boundary is the fixed DSM release for each branch, while the attack’s reach beyond the device remains unknown.
Synology warns of C3RB3R ransomware attacks targeting NAS devices
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks.