Tema: Re: Demesio Synology NAS naudotojam
Autorius: news.omnitel.net
Data: 2014-08-06 17:10:10
sitas cryptolokeris geras, teko isleist bitkoinu ...

"Caponi"  wrote in message news:lrtcan$p6j$1@trimpas.omnitel.net...

Siandien va is didmenininko parejo tokis laiskas:


Dear Customers,



Synology has issued a security warning for Synology NAS servers running
older DSM versions. All users who haven't upgraded to DSM 5.0 should take
immediate action to prevent data loss.

·  For DSM 4.3, please install DSM 4.3-3827 or later
·  For DSM 4.1 or DSM 4.2, please install DSM 4.2-3243 or later
·  For DSM 4.0, please install DSM 4.0-2259 or later

If you are unaware what DSM version your Synology is using or can not
upgrade it yourself (needs admin privileges), then as a temporary precaution
you can disable Internet access to your Synology server or shut down the NAS
(by holding down the power button until it beeps).


Details of the security threat:

Ransomware called "SynoLocker" is spreading, that is a modified version of a
Cryptolocker. It seems to be affecting Synology NAS devices with open
connection to the Internet without human intervention. Attack tries to
render your files unusable unless a certain amount is paid to the ransom
group.

At present, Synology has not observed this vulnerability in DSM 5.0.

For Synology NAS servers running DSM 4.3-3810 or earlier, and if users
encounter any of the below symptoms, we recommend they shut down their
system and contact our technical support team here:
https://myds.synology.com/support/support_form.php.



How do I know if I am affected?

·         When attempting to log in to DSM, a screen appears informing users
that data has been encrypted and a fee is required to unlock data.
·         A process called "synosync" is running in Resource Monitor.
·         DSM 4.3-3810 or earlier is installed, but the system says the
latest version is installed at Control Panel > DSM Update.

If users notice any strange behavior or suspect their Synology NAS server
has been affected by the above issue, we encourage them to contact us at
security@synology.com.


If you are already affected:

Shut down your Synology NAS server, contact Synology support directly and
wait for further instructions. Shutting down your NAS is important since it
would prevent more files being encrypted by the malware and would limit the
damage done.




-- 
Caponi
http://caponi.skelbimai.lt/