Ethical Hacking News
Synology has warned of a growing ransomware threat targeting NAS devices running outdated versions of its DiskStation Manager (DSM) operating system. The company has confirmed that attackers are exploiting a previously addressed vulnerability in DSM to encrypt data and extort ransom from unsuspecting users. Users are advised to update their DSM and enable automatic updates to minimize the risk of exploitation by attackers.
Synology has issued a critical warning about a growing ransomware threat targeting NAS devices running outdated DSM operating system. The attackers are exploiting a previously addressed vulnerability (CVE-2024-10441) with a CVSS score of 9.8 to encrypt data and extort ransom. The attacks can extend to other systems that rely on the NAS device for storage and backup purposes, causing far-reaching consequences. Synology has released corrected builds for affected DSM branches and recommends enabling automatic updates to reduce the risk of future attacks. Users of NAS devices running outdated DSM versions are advised to take immediate action to protect themselves from the ransomware threat.
Synology, a leading provider of network-attached storage (NAS) devices, has issued a critical warning to its customers about a growing ransomware threat that is specifically targeting NAS devices running outdated versions of its DiskStation Manager (DSM) operating system. The company has confirmed that attackers are taking advantage of a previously addressed vulnerability in DSM, which was released in December 2024, to encrypt data and extort ransom from unsuspecting users.
According to Synology, the attackers are exploiting a specific vulnerability, identified as CVE-2024-10441, which has a CVSS score of 9.8, making it one of the most severe vulnerabilities among the three identified in the DSM 6.2 update. This vulnerability allows an unauthenticated remote attacker to execute arbitrary code on a vulnerable device, providing a significant entry point for attackers to gain access to the device and steal sensitive data.
Synology has warned its customers that the attacks are not limited to the DSM operating system, but can extend to other systems that rely on the NAS device for storage and backup purposes. In such cases, the ransomware infection can have far-reaching consequences, including the loss of access to essential information, and the inability to restore systems from backups stored on the affected NAS device.
The company has released corrected builds for all affected DSM branches, and advises users to check the full version number installed on their NAS and compare it with the minimum fixed releases listed in the advisory. Synology also recommends enabling automatic updates to keep DSM up to date at all times, thereby reducing the risk of future attacks.
This incident highlights the importance of keeping software up to date, even after a patch has been released. It also underscores the need for users to be vigilant about security updates and to enable automatic updates to minimize the risk of exploitation by attackers.
In conclusion, Synology's warning serves as a reminder to all users of NAS devices running outdated DSM versions to take immediate action to protect themselves from this growing ransomware threat. By updating their DSM and enabling automatic updates, users can significantly reduce the risk of falling prey to this attack.
Related Information:
https://www.ethicalhackingnews.com/articles/EXPOSING-THE-RANSOMWARE-THREAT-Synology-Warns-of-Attacks-Targeting-Outdated-NAS-Devices-ehn.shtml
https://securityaffairs.com/202343/security/synology-warns-of-ransomware-attacks-targeting-nas-devices-running-outdated-dsm-versions.html
https://nvd.nist.gov/vuln/detail/CVE-2024-10441
https://www.cvedetails.com/cve/CVE-2024-10441/
Published: Tue Nov 3 12:11:20 2026 by llama3.2 3B Q4_K_M
