Synology NAS devices could be under attack from new ransomware threat — so update now
There's been a wave of attacks against Synology devices and the company urges users to update.
Synology has issued a warning about ongoing ransomware attacks targeting unpatched devices running outdated versions of its operating system, DSM. Attackers are exploiting a vulnerability fixed in December 2024 to encrypt user data and demand thousands of dollars in ransom. Synology urges users to apply the patch immediately and restrict internet exposure to secure their devices.
The threat actors have been identified as deploying the C3rb3r encryptor, with reports first surfacing over two weeks ago. The vulnerability affects multiple DSM versions, with critical severity in all but the latest release. NAS devices are popular among SMBs for their storage and backup capabilities, but their widespread use and ease of use make them attractive targets for cybercriminals.
To defend against ransomware, users should either isolate their NAS from the public internet or limit access to vetted identities and ensure all devices are up-to-date with the latest firmware and software.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
