Synology urges administrators and users to update DiskStation Manager on NAS devices following ransomware campaigns targeting outdated software versions.
The attacks leverage previously disclosed vulnerabilities patched in late 2024, including CVE-2024-10441, CVE-2024-50629, and CVE-2024-10445.
According to the Taiwanese company, these attacks target devices running older versions of the operating system. The goal of the attackers is to lock users' files and demand a ransom. Users have reported that their devices were hit by the C3RB3R program, which locks files and adds the .L0CK3D extension.
The company linked the situation to previous security advisories from late 2024 that addressed three different issues. These issues had been fixed in newer software releases for various system versions, such as the 7.2 series and earlier.
Synology strongly urges all users running vulnerable versions to update their system as soon as possible and recommends enabling automatic updates.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)