Synology: Ransomware only affects unpatched systems

A vulnerability exploited to install ransomware on Synology NAS systems was patched in December. Those who have updated DiskStation Manager to the latest version are in no danger, the company promises.

Last week it came to light that Synology NAS systems are being hit by ransomware that encrypts files and demands 260 euros in bitcoins to decrypt the files. As it turns out, only non-updated systems are susceptible to the ransomware. The bug that is used to install the ransomware was already fixed in December, according to an email that Synology sent to users and which Security.nl has in its possession.

It is not yet known what exactly the bug is. In any case, version 5.0 of Synology DiskStation Manager has never been vulnerable; patches are available for versions 4.0, 4.1 and 4.3. For users whose files are encrypted, there is no known solution yet.