Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Summary
Synology is warning customers to update their DiskStation Manager (DSM) software on NAS devices due to ongoing ransomware attacks. Threat actors are exploiting a vulnerability that was patched in December 2024 to encrypt data and demand ransom from users running outdated DSM versions.
IFF Assessment
FOE
This article describes active ransomware attacks targeting Synology NAS devices, which represents a direct threat to defenders.
Defender Context
This incident highlights the critical importance of timely patching for network-attached storage (NAS) devices, which often contain sensitive business and personal data. Defenders should prioritize keeping NAS firmware and associated software updated to mitigate risks from known vulnerabilities exploited by ransomware groups.