Is my Synology safe from the C3RB3R ransomware?

First, open DSM, go to Control Panel, then Update & Restore. If it offers a DSM update, install it. Synology asks every owner on an outdated version to update now and to turn on automatic updates.

If Update & Restore shows nothing new, your drive may already be on the newest build Synology gives your model, or the model may be past its support. That is when the exact build matters.

Synology's notice says "ransomware attacks" and points to advisory Synology-SA-24:20; it does not name the ransomware. The name C3RB3R comes from the security firm 360, which traced the cases it looked into to flaws fixed in Synology-SA-26:13. Gridinsoft notes the public reports do not establish that both describe the same attacks.

Other critical DSM advisories, like Synology-SA-26:19 (November 10, 2026) and Synology-SA-26:03 (March 19, 2026), are not tied to the ransomware by any report. Each lists different fixed builds, so a build that passes one can still be open to another.

Open Control Panel, then Info Center, copy the version line and paste it into Moat. It shows whether that exact build is open and the build to update to, with links to Synology's advisories.

Help: grapnel.team@gmail.com · Privacy · Terms · Accessibility