Add as a preferred source on GoogleRansomware Attacks on Synology NAS Users in South Korea Demand Bitcoin
The initial demand is 0.036960 BTC for a decryption tool and doubles after five days. Synology urged users to update older DSM versions.
Attacks targeting Synology NAS users in South Korea are demanding Bitcoin (BTC) to decrypt files, with the requested amount set to double after five days.
Attackers are using C3RB3R ransomware to encrypt files including photos and documents. The initial demand is 0.036960 BTC for a decryption tool. If victims miss the five-day deadline, the demand rises to 0.073920 BTC.
The Korea Internet & Security Agency (KISA) has received reports from multiple victims. Synology confirmed Thursday, Oct. 29, that attackers were exploiting previously patched vulnerabilities in older DSM versions. The company urged users to update.
The attacks involve vulnerabilities CVE-2026-13639 and CVE-2026-13684. Each vulnerability has a CVSS severity score of 9.8.
Simon Yoon
ReporterSimon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.