C3RB3R ransomware hits outdated Synology NAS devices through patched DSM flaw
C3RB3R ransomware is encrypting data on Synology NAS devices that run outdated versions of DiskStation Manager (DSM). Synology said attackers are exploiting a DSM vulnerability it patched in December 2024, but the exact CVE has not been confirmed. Encrypted files get a .L0CK3D extension. Update DSM to the latest fixed build now.
CVE-2024-10441CVE-2026-13684CVE-2026-136392 min