Synology, a popular maker of network storage devices (often called a NAS, or network-attached storage), is urging customers to update the DiskStation Manager (DSM) software that runs on them. The company says criminals are breaking into devices running outdated DSM versions and encrypting the files stored on them, then demanding a ransom.
The attackers are using security flaws that Synology already fixed, including one patched in December 2024. Customers have reported their devices being hit by a ransomware strain called C3RB3R, which renames locked files with a ".L0CK3D" ending and leaves a ransom note named "read-me3.txt" in each affected folder.
This matters for small businesses because a NAS is often where the whole office keeps its shared documents, scanned records and sometimes its backups. If the device is locked, everyone loses access at once, and backups stored on the same box can be lost too.
NAS devices have been a favorite ransomware target for years. In earlier attacks, criminals also broke in simply by guessing common administrator usernames and passwords. Synology's advice is direct: update DSM immediately, and turn on automatic updates so the device stays current.
What you should do
- Log in to your Synology device and check that DSM is fully up to date. For example, DSM 7.2.2 should be at version 7.2.2-72806-1 or later.
- Turn on automatic DSM updates so security fixes install without anyone having to remember.
- Make sure the device's admin page can't be reached from the internet unless it truly needs to be.
- Replace any default or simple admin passwords with long, unique ones, and turn on two-step sign-in.
- Keep at least one backup copy somewhere other than the NAS, such as an offline drive or a cloud backup, and have your IT provider test that it restores.
Computech prepares these summaries with AI assistance, based on public news reports. See the original report for full details.
