Ransomware gang attacking NAS devices taken down in major police operation

Date:
Fri, 18 Jul 2025 10:28:08 +0000

Description:
A 44-year-old man was arrested in Romania, and someone was caught in the act.

FULL STORY

A 44-year-old Romanian national has been arrested during a law enforcement operation to dismantle a ransomware campaign called Diskstation.

Diskstation usually targets Synology Network-Attached Storage ( NAS) devices
, often used in an enterprise environment for centralized file storage and sharing, data backup and recovery, and general content hosting. The group was first spotted in 2021, and has since used different names, such as
DiskStation Security, Quick Security, LegendaryDisk Security, 7even Security, and Umbrella Security.

Police received a series of complaints filed by numerous companies operating
in Lombardy, who suffered data encryption and were thus unable to operate unless they paid a ransom in exchange for the decryption key.

Targeting Synology devices

Among the targets were film production organizations, event organizations,
and non-profits, all active at an international level in the field of civil rights protection and charity events.

The polices investigation, which included analyzing both the encrypted
devices and the blockchain (since the ransom demands were paid in cryptocurrency), led the detectives to France and Romania, and resulted in Operation Elicius, coordinated by EUROPOL.

Several subjects were identified as part of the Diskstation group, all of Romanian nationality. In June 2024, the police raided the homes of multiple suspects in Bucharest and according to the announcement, even caught one
person "in the act of committing a crime.

The 44-year-old that was arrested is now detained, under the suspicion of abusive access to a computer or telematic system, and extortion.

Diskstations shenanigans werent widely reported in the tech media. The name
is most commonly associated with Synologys NAS product line which has been targeted by ransomware cybercriminals in the past.

This particular group reportedly demanded ransom payments between $10,000 and hundreds of thousands of dollars.

Via BleepingComputer

======================================================================
Link to news story: https://www.techradar.com/pro/security/ransomware-gang-attacking-nas-devices-t aken-down-in-major-police-operation

$$
--- SBBSecho 3.28-Linux
* Origin: capitolcityonline.net * Telnet/SSH:2022/HTTP (1:2320/105)