Synology NAS Ransomware | Guide to remove it from system

How to remove Synology NAS Ransomware from your system?

Guide to Protect Synology NAS Against Ransomware Attack New cyber-security report sheds light on the current Ransomware attack resurgence on Synology NAS (Network Attached Storage) systems.

Understanding Synology?

Synology is a Taiwan headquartered storage vendor that specializes in Network Attached Storage (NAS) appliances. NAS is a computer data storage server that provides data access to heterogeneous group of clients.

This renowned Corporation was founded in January 2000 & distributes products worldwide.

Synology Ransomware Recent research revealed that Synology owners discovered that all the files in their NAS systems were encrypted. Hence, users of Synology NAS were warned to strengthen the passwords to their Network attached storage.

Threat Behaviour Investigations revealed that the attackers breached Synology NAS’s login interface via brute force or so called dictionary attacks and stole admin’s credentials. Once

the guessed password matched with the default password, the attackers gained access to the NAS device and encrypted all the files on their NAS system. These cyber criminals demanded 0.06 Bitcoin, now worth $583 to restore the encrypted data.

It is believed that attackers leveraged botnet address to hide the real source IP.

Similar attacks in the recent past Cyber criminals have been targeting internet facing NAS devices using similar methods from a variety of other vendors. For instance, attack on Taiwanese vendor QNAP’s NAS grabbed the headlines lately. Ransomware known as eCh0raix targeted QNAP NASes that had weak passwords or old operating systems. These infringements remind us to take security of our NAS devices rather seriously.

How to protect Synology NAS from Ransomware Attack ?

It is believed that there is no tool available to decrypt the encrypted files. Hence, victims are advised to stay vigilant of this nasty trap as there is no way they can get the data back unless they have its backup.

To enhance system security, Synology users are recommended to leverage account management settings & built-in network.

1. Update Disk Station Manager (DSM): DSM is an intuitive web-based operating system for every Synology NAS, designed to help you manage your digital assets across home and office.

Periodically, Synology releases free DSM updates. Updates may include function improvements, new features, performance enhancements, critical bug fixes and security patches for system stability. Hence, upgrading DSM ensures data security.

2. Strong Passwords: Synology has a feature that allows its users to enforce strong passwords. Using complex passwords prevents dictionary attacks to a great extent. To ensure system security you can: • Enable Auto Block in Control Panel to block IP addresses with too many failed login attempts. • Run Security Advisor to ensure there is no weak password in the system.

3. Enable two-step verification: Enabling two-step verification prevents users from internet based attack as the probability to surpass it is almost negligible.

4. Disable the system default "admin" account: Users are recommended to create a new account in administrator group and disable the system default "admin" account to prevent network breach.

5. Backup: It is vital that you make offsite backups of the data to protect your data from network threats, unexpected hardware failure, and natural disasters. Moreover, you are advised to give read only access to your backup folders to avoid any discrepancies.

Ransomware attack has become a growing threat to small offices & home users that are deprived of sophisticated defence systems. Internet based attacks in particular have grabbed the news headlines lately. The responsibility of putting an end to malware infections lies in the hands of users. Cautious attitude can save them from a huge loss. After all for every cyber-attack, there is a human cost.

Resource Link : https://www.virusremovalguidelines.com/ransomware/how-toremove-synology-nas-ransomware-from-your-system