Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw

Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices after observing active ransomware attacks. Threat actors are exploiting vulnerabilities patched in late 2024 to target outdated instances and deploy payloads such as the C3RB3R ransomware. Users are advised to immediately apply software updates and disable unnecessary exposure of administrative interfaces to the internet.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai discovers reachable network services and administrative panels on the external perimeter, identifying exposed Synology DSM versions advertised in service banners to flag outdated, vulnerable targets.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.

Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

Launch Scan For My Domain