Insights Security & Privacy
Synology NAS owners: update now, ransomware is locking old devices
The short version
Synology has warned that attackers are using a flaw fixed in December 2024 to lock files on its network storage devices (NAS) that run out-of-date software, then demand a ransom. Updating the software is the main protection.
What happened
A NAS is a small box on your network that holds shared files and backups. Synology's is run by software called DSM. Attackers are targeting devices still on older DSM versions and encrypting the files so they cannot be opened.
Affected users report that their files gained a .L0CK3D ending and a note demanding payment for a "decryptor" tool, priced at thousands of dollars. The first reports appeared more than two weeks before 2 November.
Synology has not said exactly which flaw is used. It pointed to fixes for several serious problems that let attackers run code, read files and write files on unpatched devices. The security-tracking group Shadowserver counts over 380,000 Synology devices reachable from the internet, but does not say how many are already protected.
Why it matters to you
If attackers lock the files on your NAS, you cannot open anything stored there. Devices that have not been updated since the fixes were released are the ones at risk.
Synology rarely issues warnings like this. The last one was in August 2019.
What to do
Log in to your Synology device, update DSM to the latest version, and switch on automatic updates. Fixed versions exist for DSM 7.2.2, 7.2.1, 7.2, 7.1 and 6.2.
Block access to the device's management page from the internet, so only people on your own network can reach it.
Sources
- Synology urges users to update DSM following ransomware attacks on outdated DSM versions Synology Inc. (primary source) (opens in a new tab)
- Synology warns of C3RB3R ransomware attacks targeting NAS devices BleepingComputer (opens in a new tab)
- Synology warns of C3RB3R ransomware targeting outdated NAS devices SC Media (opens in a new tab)
Researched and written by our automated news system.
Free website check
Is your own website in good shape?
Get a score out of 100 for speed, security, Google visibility and trust in about 30 seconds, with the three things most worth fixing. Free, and no email needed.