Synology NAS devices hit by C3RB3R ransomware exploiting previously patched flaws
RANSOMWAREredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
C3RB3R ransomware is being deployed against Synology NAS devices, encrypting files with a .L0CK3D extension and dropping a read-me3.txt ransom note. Synology's advisory Synology-SA-24:20 covers the flaws linked to the attacks, and the reports do not establish how many devices are affected or which flaw was used.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Update DiskStation Manager and installed packages to the latest release supported by your NAS model.
- Remove direct internet access to DSM management and SSH, and use a VPN for remote connections.
- Check the NAS for unusual logins, unknown administrator accounts and unexpected scheduled tasks.
- Enable two-factor authentication and keep independent offline or off-site backups.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News