Synology NAS Users Targeted by LOCK3D Ransomware Attack
Some users have reported that Synology NAS devices were hit by ransomware, with files encrypted and appended with the .LOCK3D or .L0CK3D extension, and ransom notes appearing in some directories. Discussions on V2EX have also revealed cases involving the latest DSM systems. Users are advised to check for these file extensions and ransom notes, disable unnecessary public-facing services, update packages and container images, and verify offline or offsite, non-writable backups. If infected, they…
Synology NAS Users Targeted by LOCK3D Ransomware Attack
Some users have reported that their Synology NAS devices were hit by ransomware. Files were encrypted and appended with the .LOCK3D or .L0CK3D extension, and ransom notes appeared in some directories. Discussions on V2EX have also revealed cases involving the latest DSM systems.
Users can check for the file extensions and ransom notes, disable unnecessary services exposed to the public internet, update their packages and container images, and verify their offline or off-site, non-writable backups. If an infection has occurred, the device should be disconnected from the network and isolated, while logs and the ransom note should be preserved.
Source: V2EX