Ransomware hits exposed Synology NAS, likely exploiting 18-month-old flaw
Reddit user's web interface was exposed and security patches were about 18 months out of date; their 3-2-1 backup setup seemingly meant no data was lost
A Reddit user says files on their Synology DS918+ NAS were encrypted in a ransomware attack; analysis of logs and operating system files suggested the attack likely involved CVE-2024-10441, a remote code execution vulnerability revealed 18 months ago. The device had its web interface exposed to the internet and was roughly a year and a half out of date with security patches, according to a detailed write-up by user NakamuraHwang.