In a recent security alert, Synology has urged its customers to update the DiskStation Manager (DSM) software on their Network Attached Storage (NAS) devices. This comes in response to ransomware attacks that have exploited a previously addressed vulnerability.
Exploitation of Known Vulnerabilities
The Taiwanese tech company reported that cybercriminals are targeting DSM systems using a flaw that was patched in December 2024. The primary goal of these attacks is to encrypt users’ data and demand a ransom for decryption.
Although Synology did not specify the exact vulnerability being exploited, it referenced a security advisory from November 2024. This advisory detailed three vulnerabilities: CVE-2024-10441, CVE-2024-50629, and CVE-2024-10445, each with different levels of severity and potential impacts on the DSM system.
Security Patches and Updates
Synology highlighted that these vulnerabilities have been mitigated in recent DSM updates. Users are advised to upgrade to the following DSM versions or newer: 7.2.2-72806-1 for DSM 7.2.2, 7.2.1-69057-6 for DSM 7.2.1, 7.2-64570-4 for DSM 7.2, 7.1.1-42962-7 for DSM 7.1, and 6.2.4-25556-8 for DSM 6.2.
Recent reports indicate that C3RB3R ransomware has been encrypting files on Synology devices, appending a “.L0CK3D” extension to compromised files. This highlights the urgent need for users to update their systems.
Historical Context and Recommendations
Synology NAS devices have previously been targeted by various ransomware attacks. In 2019, QNAP Systems’ NAS devices were affected by the QNAPCrypt ransomware. A similar threat emerged in August 2021 when Synology devices faced brute-force attacks from the StealthWorker malware family, leading to additional ransomware incidents.
To safeguard against these threats, Synology strongly advises users to update their DSM to the latest versions and enable automatic updates. This proactive measure is crucial to ensure the security of their data and the integrity of their systems.
In conclusion, maintaining updated DSM software is vital for protecting Synology NAS devices from ransomware threats. Users should remain vigilant and implement recommended security practices to prevent unauthorized access and potential data loss.
