Synology NAS Owners - ALERT!

[cKy]

There is a malware exploit going around that is targeting Synology NAS's. It basically puts a version of Cryptolocker on the NAS, rendering all your files useless.

http://www.theregister.co.uk/2014/08..._as_you_think/

Patch and turn off your NAS as a precaution. I don't own one of these but I know Synology is a popular model.

[FlameOn]

Wow thanks... Good to know I should update my firmware as soon as I get home. Seems this might not help though.

[DownInFlames]

Originally Posted by FlameOn

Wow thanks... Good to know I should update my firmware as soon as I get home. Seems this might not help though.

Updating won't help because they haven't released a fix yet. It's more important that you close access to ports 5000 and 5001 (I closed them all for good measure).

[Table 5]

Thanks for passing this along. I have no idea what that article is talking about, so I just turned mine off until there is a patch or something.

[FlameOn]

I'm using the Shaw default router and I don't think I changed any of my port settings. I'm really hoping that the Synology didn't turn those on by themselves via UPnP. Cross fingers for when I get home and check this Supremely nervous about having everything locked and my NAS admin page is not something I go in and check on a regular basis.

[psicodude]

You would either have to open them manually or run the "EZ_Internet" tool that came with the NAS which opens them automatically via UPnP.

[FlameOn]

Originally Posted by psicodude

You would either have to open them manually or run the "EZ_Internet" tool that came with the NAS which opens them automatically via UPnP.

Very good... I checked and the ports are not open on my firewall... looks like I never activated said feature when I set it up years ago... phew.

[Inglewood Jack]

Happy Synology owner here...I read a very different version of the ransom ware story:

http://www.zdnet.com/ransomware-atta...es-7000032335/

According to this one you're only vulnerable if you're running a pretty old version of DSM...which I guess is possible if your NAS is getting geriatric and can't run version 5. But anyways who's right about the issue?