conv.

All stories
SecurityQuiet 9d · day 13

Synology warns of C3RB3R ransomware targeting NAS devices

Threat actors are exploiting a patched vulnerability to attack Synology NAS devices running outdated DSM software.

newest coverage 8d agosummary written 8d ago7 pieces10 likes & upvotes2 comments Hacker NewsMastodon

What to know

  • C3RB3R ransomware is actively exploiting a vulnerability in Synology NAS devices that was patched in December 2024, targeting systems running outdated DSM versions.
  • Synology urges immediate updates and automatic update enablement to prevent infection; users with outdated systems remain at high risk.
  • Recovery tools and community resources have emerged, but the campaign continues to affect unpatched devices.
most voices

Users must update immediately to protect against this active threat.

Synology NAS manufacturerThreat actors Ransomware operators

Synology warns of C3RB3R ransomware targeting NAS devices
synology.com

How it unfolded 2 developments, newest first · click a bar or a number to jump posts

Peak 3 pieces in 3h at Nov 2, 4 AM; 7 pieces over 13 days (1 article · 6 posts) Oct 29, 5 AM — 1 piece · 1 post — Hacker News 1Oct 29, 8 AM — quietOct 29, 11 AM — quietOct 29, 2 PM — quietOct 29, 5 PM — quietOct 29, 8 PM — quietOct 29, 11 PM — quietOct 30, 2 AM — quietOct 30, 5 AM — quietOct 30, 8 AM — quietOct 30, 11 AM — quietOct 30, 2 PM — quietOct 30, 5 PM — quietOct 30, 8 PM — quietOct 30, 11 PM — quietOct 31, 2 AM — quietOct 31, 5 AM — quietOct 31, 8 AM — quietOct 31, 11 AM — quietOct 31, 2 PM — quietOct 31, 5 PM — quietOct 31, 8 PM — quietOct 31, 11 PM — quietNov 1, 1 AM — quietNov 1, 4 AM — quietNov 1, 7 AM — quietNov 1, 10 AM — quietNov 1, 1 PM — 2 pieces · 2 posts — Hacker News 1, Mastodon 1Nov 1, 4 PM — quietNov 1, 7 PM — quietNov 1, 10 PM — quietNov 2, 1 AM — quietNov 2, 4 AM — 3 pieces · 1 article · 2 posts — Mastodon 3Nov 2, 7 AM — quietNov 2, 10 AM — quietNov 2, 1 PM — quietNov 2, 4 PM — quietNov 2, 7 PM — quietNov 2, 10 PM — quietNov 3, 1 AM — quietNov 3, 4 AM — quietNov 3, 7 AM — quietNov 3, 10 AM — quietNov 3, 1 PM — quietNov 3, 4 PM — 1 piece · 1 post — Mastodon 1Nov 3, 7 PM — quietNov 3, 10 PM — quietNov 4, 1 AM — quietNov 4, 4 AM — quietNov 4, 7 AM — quietNov 4, 10 AM — quietNov 4, 1 PM — quietNov 4, 4 PM — quietNov 4, 7 PM — quietNov 4, 10 PM — quietNov 5, 1 AM — quietNov 5, 4 AM — quietNov 5, 7 AM — quietNov 5, 10 AM — quietNov 5, 1 PM — quietNov 5, 4 PM — quietNov 5, 7 PM — quietNov 5, 10 PM — quietNov 6, 1 AM — quietNov 6, 4 AM — quietNov 6, 7 AM — quietNov 6, 10 AM — quietNov 6, 1 PM — quietNov 6, 4 PM — quietNov 6, 7 PM — quietNov 6, 10 PM — quietNov 7, 1 AM — quietNov 7, 4 AM — quietNov 7, 7 AM — quietNov 7, 10 AM — quietNov 7, 1 PM — quietNov 7, 4 PM — quietNov 7, 7 PM — quietNov 7, 10 PM — quietNov 8, 1 AM — quietNov 8, 4 AM — quietNov 8, 7 AM — quietNov 8, 10 AM — quietNov 8, 1 PM — quietNov 8, 4 PM — quietNov 8, 7 PM — quietNov 8, 10 PM — quietNov 9, 1 AM — quietNov 9, 4 AM — quietNov 9, 7 AM — quietNov 9, 10 AM — quietNov 9, 1 PM — quietNov 9, 4 PM — quietNov 9, 7 PM — quietNov 9, 10 PM — quietYesterday, 1 AM — quietYesterday, 4 AM — quietYesterday, 7 AM — quietYesterday, 10 AM — quietYesterday, 1 PM — quietYesterday, 4 PM — quietYesterday, 7 PM — quietYesterday, 10 PM — quietToday, 1 AM — quietToday, 4 AM — quiet 12
Oct 30Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9now · 5:49 AM ET
  1. 2

    Security community spreads awareness of C3RB3R campaign

    Security researchers and community members on Mastodon and Reddit begin sharing details of the ransomware campaign, including recovery tools and victim discussions.

    “Synology NAS users are being targeted with the C3RB3R ransomware again…”
    — campuscodi
    • campuscodi@mastodon.social

      Synology NAS users are being targeted with the C3RB3R ransomware again https://www. synology.com/en-global/company /news/article/C3RB3R https:// github.com/soimy/c3rb3r-rescue https://www. reddit.com/r/synology/comments /1xifzoi/for_victims_of_c3rb3r_ransomware/ https://www. reddit.com/r/synology/comments…

      campuscodi@mastodon.socialMastodon9d agoview on Mastodon ↗
    1 more of the top 2 · 2 posts in this stretch
    • Javvad@infosec.exchange

      Synology warns of C3RB3R ransomware hitting NAS devices through a flaw patched in December 2024. Update the box, folks. # Synology # Ransomware # CyberSecurity # NAS # InfoSec Source: https://www. bleepingcomputer.com/news/secu rity/synology-warns-customers-of-ongoing-c3rb3r-ransomware-attacks/

      Javvad@infosec.exchangeMastodon8d agoview on Mastodon ↗
    all of them →
  2. background

    Synology issues advisory urging immediate updates — Synology identifies the C3RB3R ransomware campaign and publicly recommends all users running vulnerable versions update DSM immediately. The company also recommends enabling automatic updates.

  3. 2 days quiet
  4. 1

    C3RB3R ransomware attacks hit Synology NAS devices

    Threat actors begin exploiting a vulnerability previously patched in December 2024 to target Synology NAS devices running outdated versions of DSM. The attacks encrypt user data and demand ransom payments.

    1. 1 outlet first by Mastodon, 8d ago · read ↗

What people are saying 0 voices from 0 sites · best of 2 · verbatim