Ransomware attack on Synology NAS devices encrypts users' files in South Korea and abroad
A C3RB3R ransomware attack targeting Synology NAS devices running older versions of DSM encrypted users' files. The Korea Internet & Security Agency (KISA) received numerous reports of damage in South Korea, and the attackers demanded approximately 4 million won worth of bitcoin to restore the files. Synology advised users to update their devices immediately.
Key facts
- Affected organization
- Synology
- Incident type
- Ransomware
- Occurred / detected
- Not confirmed
- Scale of damage
- NAS users' files encrypted in South Korea and abroad; extent of damage unknown
- Cause / method
- Exploitation of a remote code execution vulnerability in DSM that had not received security updates
- Location
- South Korea
Timeline
- Reports emerged of internet-exposed Synology NAS devices being infected with ransomware through an 18-month-old remote code execution vulnerability.
- Reports emerged of users in South Korea having their files encrypted and receiving demands for approximately 4 million won worth of bitcoin.
- Synology urged customers to update immediately amid an increase in C3RB3R attacks.
16 related reports
- Tech whiz's internet-accessible Synology NAS gets bit by ransomware attack from 18-month-old remote code execution flaw — security updates neglected in a series of catastrophic errors
- Ransomware hits Synology NAS in Korea, demands bitcoin as damage spreads
- [단독] "파일 이용하려면 비트코인 400만원어치 내라"… 시놀로지 NAS 노린 랜섬웨어 공격에 피해 속수무책
- Ransomware 'C3RB3R' Hits Synology NAS: 3.9 Million Won in Bitcoin Demanded, No Fix Beyond Patching
- Hackers Target Synology NAS Devices With C3RB3R Ransomware
- Synology NAS hit by C3RB3R ransomware, files locked with .L0CK3D
- DS918+, 18개월간 패치 없이 DSM을 인터넷에 노출해 랜섬웨어 감염
- Synology warns of C3RB3R ransomware attacks targeting NAS devices
- Hackers Exploit Patched Synology NAS Vulnerabilities to Deploy C3RB3R Ransomware and Encrypt Files
- Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
- Synology DSM Ransomware Wave (C3RB3R): Outdated NAS Under Attack, Update to Synology-SA-24:20 Fixed Builds Now
- Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions
- Synology NAS devices could be under attack from new ransomware threat — so update now
- Synology製NASに「C3RB3R」ランサムウェア攻撃 古いDSMの修正済み脆弱性を悪用、メーカーが緊急更新を呼びかけ
- Synology NAS Under Ransomware Attack
- まるでNAS!? だけどランサムウェア対策が詰め込まれたSynology ActiveProtectの使い方を詳しく解説
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.