{"id":22234,"date":"2026-10-30T10:09:40","date_gmt":"2026-10-30T02:09:40","guid":{"rendered":"https:\/\/synopower.club\/?p=22234"},"modified":"2026-11-02T03:20:41","modified_gmt":"2026-11-01T19:20:41","slug":"synology-c3rb3r-ransomware","status":"publish","type":"post","link":"https:\/\/synopower.club\/zh\/synology-c3rb3r-ransomware\/","title":{"rendered":"Synology \u4e0a\u7684 C3RB3R \u52d2\u7d22\u8edf\u9ad4\uff1a\u8d77\u6e90\u3001\u5fa9\u539f\u8207\u5982\u4f55\u4fdd\u6301\u5b89\u5168"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>C3RB3R \u52d2\u7d22\u8edf\u9ad4<\/strong> \u5728 2026 \u5e74 10 \u6708 28 \u65e5\u5de6\u53f3\u958b\u59cb\u51fa\u73fe\u5728 Synology NAS \u8a2d\u5099\u4e0a\uff0c\u4e0d\u5230\u4e00\u5929\u6642\u9593\uff0c\u5b83\u5c31\u6210\u70ba r\/synology \u4e0a\u552f\u4e00\u7684\u8a0e\u8ad6\u8a71\u984c\u3002\u6a94\u6848\u88ab\u91cd\u65b0\u547d\u540d\u4e26\u5e36\u6709 <code>L0CK3D<\/code> \u526f\u6a94\u540d\uff08\u662f\u6578\u5b57 0\uff0c\u800c\u4e0d\u662f\u5b57\u6bcd O\uff09\uff0c\u6bcf\u500b\u8cc7\u6599\u593e\u90fd\u6703\u7522\u751f\u4e00\u500b <code>read-me3.txt<\/code> \u52d2\u7d22\u8aaa\u660e\u6a94\uff0c\u4e26\u6709\u4e00\u500b Tor \u5165\u53e3\u7db2\u7ad9\u8981\u6c42\u652f\u4ed8\u6bd4\u7279\u5e63\u3002\u6700\u5feb\u4e14\u6700\u6709\u7528\u7684\u8cc7\u8a0a\u4e26\u975e\u4f86\u81ea\u82f1\u6587\u65b0\u805e\u7db2\u7ad9\uff0c\u800c\u662f\u4f86\u81ea Synology \u64c1\u6709\u9f90\u5927\u4f7f\u7528\u8005\u793e\u7fa4\u7684\u4e2d\u6587\u8ad6\u58c7\uff0c\u4ee5\u53ca\u7531\u5be6\u969b\u6551\u56de\u8cc7\u6599\u6216\u8b49\u5be6\u7121\u6cd5\u6551\u56de\u7684\u53d7\u5bb3\u8005\u6240\u64b0\u5beb\u7684\u4e09\u500b GitHub \u5132\u5b58\u5eab\u3002\u672c\u6307\u5357\u5f59\u6574\u4e86\u76ee\u524d\u95dc\u65bc C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u5df2\u78ba\u8a8d\u8cc7\u8a0a\uff1a\u5b83\u5f9e\u4f55\u800c\u4f86\u3001\u5982\u4f55\u5165\u4fb5\u3001\u552f\u4e00\u6709\u6548\u7684\u6551\u56de\u9014\u5f91\uff0c\u4ee5\u53ca\u6211\u5011\u904b\u4f5c\u7684\u5099\u4efd\u8a2d\u8a08\uff0c\u8b93\u9019\u985e\u653b\u64ca\u5c0d\u6211\u5011\u800c\u8a00\u50c5\u9700\u9084\u539f\u5373\u53ef\uff0c\u800c\u7121\u9700\u652f\u4ed8\u8d16\u91d1\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u66f4\u65b0\uff0c2026 \u5e74 10 \u6708 31 \u65e5\uff1a<\/strong> Synology \u73fe\u5df2\u78ba\u8a8d\u5165\u4fb5\u9014\u5f91\u3002\u5728 10 \u6708 30 \u65e5\u5bc4\u7d66\u5ba2\u6236\u7684\u96fb\u5b50\u90f5\u4ef6\u4e2d\uff0c\u5b98\u65b9\u8b49\u5be6 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u50c5\u5229\u7528\u4e86\u5728 2024 \u5e74 12 \u6708\u4fee\u88dc\u7684 Synology-SA-24:20 \u6f0f\u6d1e\uff0c\u4e14\u6b64\u653b\u64ca\u884c\u52d5\u8207\u540c\u6708\u4fee\u88dc\u7684 PHP2Shell \u6f0f\u6d1e\u7121\u95dc\u3002\u6211\u5011\u65b0\u589e\u4e86 Synology \u5b98\u65b9\u7684\u56db\u6b65\u9a5f\u6aa2\u67e5\u6e05\u55ae\u3001\u6211\u5011\u5c0d\u70ba\u4f55\u653b\u64ca\u6703\u5728\u7576\u6642\u7206\u767c\u7684\u89e3\u8b80\uff0c\u4ee5\u53ca\u6211\u5011\u6b63\u5728\u4f7f\u7528\u3001\u4e14\u5927\u591a\u6578\u7528\u6236\u65e9\u5df2\u4ed8\u8cbb\u7684\u984d\u5916\u9632\u79a6\u5c64\uff1aActive Insight \u52d2\u7d22\u8edf\u9ad4\u4fdd\u8b77\u3002<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>SynoPower Club \u9ede\uff1a<\/strong>\u4e2d\u6587 NAS \u793e\u7fa4\u4e2d\u7684\u4e00\u540d\u53d7\u5bb3\u8005\u5728\u55ae\u53f0\u8a2d\u5099\u4e0a\u5b58\u6709\u8d85\u904e 50 TB \u7684\u8cc7\u6599\u4e14\u6c92\u6709\u5feb\u7167\u3002\u52a0\u5bc6\u7a0b\u5f0f\u904b\u4f5c\u901f\u5ea6\u5920\u6162\uff0c\u56e0\u6b64\u53ea\u6709\u4ed6 2024 \u5e74\u7684\u7167\u7247\u906d\u5230\u52a0\u5bc6\uff0c\u800c\u9019\u4e9b\u7167\u7247\u525b\u597d\u5728\u96f2\u7aef\u786c\u789f\u4e0a\u6709\u51b7\u5099\u4efd\u3002\u53e6\u4e00\u4f4d\u53d7\u5bb3\u8005\u5247\u5931\u53bb\u4e86\u4e94\u5e74\u4f86\u7684\u79c1\u6709 GitLab \u5132\u5b58\u5eab\uff0c\u56e0\u70ba RAID 6 \u52a0\u4e0a\u4e09\u500b\u5099\u4efd\u5168\u90fd\u653e\u5728\u540c\u4e00\u53f0\u6a5f\u5668\u4e0a\u3002C3RB3R \u52d2\u7d22\u8edf\u9ad4\u64ca\u6557\u7684\u4e0d\u662f\u4ed6\u5011\u7684\u5132\u5b58\u7a7a\u9593\uff0c\u800c\u662f\u4ed6\u5011\u7684\u5099\u4efd\u67b6\u69cb\u3002\u6211\u5011\u5c07\u516c\u958b\u7db2\u7ad9\u4ee5 Docker \u5f62\u5f0f\u904b\u4f5c\u65bc Virtual DSM \u5167\uff0c\u5f9e\u5bbf\u4e3b\u6a5f\u5c0d\u6574\u500b\u5ba2\u9ad4\u6a5f\u9032\u884c\u5feb\u7167\uff0c\u8907\u88fd\u5230\u7b2c\u4e8c\u53f0 NAS\uff0c\u4e26\u6309\u6392\u7a0b\u532f\u51fa\u81f3 USB \u8207\u96f2\u7aef\u3002\u5982\u679c\u5ba2\u9ad4\u6a5f\u4eca\u665a\u88ab\u52a0\u5bc6\uff0c\u6211\u5011\u53ea\u9700\u5c07\u5176\u5fa9\u539f\u81f3\u6700\u65b0\u7684\u5feb\u7167\uff0c\u653b\u64ca\u8005\u5c07\u4e00\u7121\u6240\u7372\u3002<\/p>\n<\/blockquote>\n\n\n\n<h2 id=\"what-is-c3rb3r-ransomware\" class=\"wp-block-heading\">\u4ec0\u9ebc\u662f C3RB3R \u52d2\u7d22\u8edf\u9ad4\uff1f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">C3RB3R \u52d2\u7d22\u8edf\u9ad4\u662f Cerber \u5bb6\u65cf\u7684 Linux \u7248\u672c\uff0c\u8a72\u52d2\u7d22\u8edf\u9ad4\u7cfb\u5217\u81ea 2016 \u5e74\u4ee5\u4f86\u5c31\u5df2\u5b58\u5728\uff0c\u591a\u5e74\u4f86\u65b7\u65b7\u7e8c\u7e8c\u4ee5 NAS \u8a2d\u5099\u70ba\u76ee\u6a19\u3002360 \u5c07 2026 \u5e74 10 \u6708\u91dd\u5c0d Synology \u7684\u653b\u64ca\u6ce2\u6b78\u56e0\u65bc\u5b83\u3002\u5728\u53d7\u611f\u67d3\u7684 DSM \u8a2d\u5099\u4e0a\uff0cC3RB3R \u52d2\u7d22\u8edf\u9ad4\u52a0\u5bc6\u7a0b\u5f0f\u4f5c\u70ba\u540d\u70ba <code>libgld<\/code>\u7684\u975c\u614b\u9023\u7d50\u3001\u7d93 UPX \u58d3\u7e2e\u7684 x86-64 \u4e8c\u9032\u4f4d\u6a94\u57f7\u884c\u3002\u5b83\u5728\u555f\u52d5\u5f8c\u6703\u522a\u9664\u81ea\u8eab\u7684\u6a94\u6848\uff0c\u56e0\u6b64\u57f7\u884c\u4e2d\u7684\u7a0b\u5e8f\u6703\u5728 <code>(\u5df2\u522a\u9664)<\/code> \u986f\u793a\u65bc\u5176\u53ef\u57f7\u884c\u6a94\u8def\u5f91\u65c1\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f5c\u70ba\u906d\u53d7 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u653b\u64ca\u7684\u8a2d\u5099\u64c1\u6709\u8005\uff0c\u60a8\u6240\u770b\u5230\u7684\u73fe\u8c61\u5728\u6bcf\u4efd\u5831\u544a\u4e2d\u90fd\u662f\u4e00\u81f4\u7684\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u6a94\u6848\u88ab\u91cd\u65b0\u547d\u540d\u70ba <code>name.ext.L0CK3D<\/code>\u3002\u67d0\u4e9b\u5831\u544a\u5c07\u5176\u5beb\u70ba <code>LOCK3D<\/code>\uff0c\u4f46 GitHub \u7684\u5206\u6790\u5f15\u7528\u7684\u662f\u6578\u5b57 0\u3002<\/li>\n\n\n\n<li>\u6bcf\u500b\u53d7\u52a0\u5bc6\u8cc7\u6599\u593e\u4e2d\u90fd\u6709\u4e00\u4efd\u540d\u70ba <code>read-me3.txt<\/code> \u7684\u52d2\u7d22\u8aaa\u660e\u6a94\uff0c\u6a19\u984c\u70ba C3RB3R INSTRUCTIONS\u3002<\/li>\n\n\n\n<li>\u6a19\u984c\u70ba C3rb3r Decryptor \u7684 Tor \u9801\u9762\u3002\u4e00\u540d\u53d7\u5bb3\u8005\u7684\u87a2\u5e55\u622a\u5716\u986f\u793a\uff0c\u82e5\u5728\u4e94\u5929\u5167\u652f\u4ed8\u9700 0.03696 BTC\uff08\u7d04 2,952 \u7f8e\u5143\uff09\uff0c\u4e4b\u5f8c\u5247\u7ffb\u500d\u81f3 0.07392 BTC\uff08\u7d04 5,904 \u7f8e\u5143\uff09\uff0c\u4e26\u9644\u6709\u5012\u6578\u8a08\u6642\u5668\u3002<\/li>\n\n\n\n<li>\u900f\u904e\u7b26\u5408 <code>\/etc\/cron.d\/synot*<\/code>\u7684 cron \u9805\u76ee\u4fdd\u6301\u5e38\u99d0\uff0c\u9019\u4e9b\u9805\u76ee\u6703\u81ea\u6211\u91cd\u5efa\uff0c\u4e14\u5728\u81f3\u5c11\u4e00\u500b\u6848\u4f8b\u4e2d\u7d93\u904e DSM \u5347\u7d1a\u5f8c\u4f9d\u7136\u5b58\u5728\u3002<\/li>\n\n\n\n<li>\u540c\u4e00\u5132\u5b58\u5340\u4e0a\u7684\u5099\u4efd\u6a94\u6848\u9023\u540c\u5176\u4ed6\u6240\u6709\u5167\u5bb9\u4e00\u4f75\u88ab\u52a0\u5bc6\uff0c\u5305\u62ec Hyper Backup \u76ee\u6a19\u548c\u8cc7\u6599\u5eab\u50be\u5370\uff08dumps\uff09\u3002<\/li>\n<\/ul>\n\n\n\n<h2 id=\"where-it-started\" class=\"wp-block-heading\">\u59cb\u65bc\u4f55\u8655\uff1ar\/synology \u8207\u4e2d\u6587\u8ad6\u58c7<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">C3RB3R \u52d2\u7d22\u8edf\u9ad4\u6700\u521d\u65bc 2026 \u5e74 10 \u6708 28 \u65e5\u81f3 29 \u65e5\u5de6\u53f3\u5728 r\/synology \u82f1\u6587\u7248\u9762\u4e0a\u9996\u6b21\u6d6e\u73fe\uff0c\u53d7\u5bb3\u8005\u76f8\u7e7c\u767c\u6587\u3002\u6578\u5c0f\u6642\u5167\uff0c\u8b80\u8005\u8868\u793a\u6bcf\u6b21\u91cd\u65b0\u6574\u7406\u8a72\u7248\u9762\u90fd\u6703\u51fa\u73fe\u65b0\u7684\u8a0e\u8ad6\u4e32\u3002\u5176\u4e2d\u6709\u4e09\u500b\u8a0e\u8ad6\u4e32\u975e\u5e38\u503c\u5f97\u5b8c\u6574\u95b1\u8b80\uff0c\u56e0\u70ba\u6bcf\u500b\u8a0e\u8ad6\u4e32\u90fd\u88dc\u5145\u4e86\u4e0d\u540c\u7684\u8cc7\u8a0a\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u9451\u8b58\u5206\u6790\u5831\u544a\u3002<\/strong> \u4e00\u4f4d\u4f7f\u7528 DSM 7.2.1-69057 Update 5 \u7684 DS918+ \u64c1\u6709\u8005\uff0c\u5176\u7db2\u9801\u4ecb\u9762\u53ef\u5f9e\u7db2\u969b\u7db2\u8def\u9023\u7dda\uff0c\u4ed6\u5c07\u8a2d\u5099\u95dc\u6a5f\u4e26\u5728 Proxmox \u5bbf\u4e3b\u6a5f\u4e0a\u4ee5\u552f\u8b80\u65b9\u5f0f\u6aa2\u67e5\u786c\u789f\u3002DSM \u9a57\u8b49\u65e5\u8a8c\u5305\u542b\u4e00\u500b\u767b\u5165\u8acb\u6c42\uff0c\u5176\u5e33\u865f\u6b04\u4f4d\u5e36\u6709\u6ce8\u5165\u7684 <code>LD_PRELOAD<\/code> \u548c <code>LD_DEBUG_OUTPUT<\/code> \u884c\u4ee5\u53ca\u7de8\u78bc\u5f8c\u7684 shell \u6307\u4ee4\uff0c\u9084\u6709\u4e00\u500b\u4f4d\u65bc <code>\/etc\/cron.d<\/code>\u4e0b\u7684\u6a94\u6848\u3002\u9019\u8207\u5df2\u516c\u958b\u7684 CVE-2024-10441 \u6280\u8853\u4e00\u81f4\u30023-2-1 \u5099\u4efd\u610f\u5473\u8457\u9019\u6b21\u653b\u64ca\u50c5\u82b1\u8cbb\u4e86\u9084\u539f\u6642\u9593\uff0c\u800c\u975e\u8d16\u91d1\u3002\u5728\u6b64\u95b1\u8b80\u539f\u6587\uff1a <a href=\"https:\/\/www.reddit.com\/r\/synology\/comments\/1xhqgov\/well_it_finally_happened_my_first_real_ransomware\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u5509\uff0c\u7d42\u7a76\u9084\u662f\u767c\u751f\u4e86\u3002\u9019\u662f\u6211\u7b2c\u4e00\u6b21\u9047\u5230\u771f\u6b63\u7684\u52d2\u7d22\u8edf\u9ad4\u4e8b\u4ef6<\/a>.<\/li>\n\n\n\n<li><strong>\u50c5\u4f7f\u7528 Photos \u7684\u4f7f\u7528\u8005\u3002<\/strong> \u9019\u4f4d\u64c1\u6709\u8005\u4ee5\u70ba DSM \u5df2\u662f\u6700\u65b0\u7248\u672c\uff0c\u4e14\u50c5\u4f7f\u7528 Synology Photos\uff0c\u4f46\u8def\u7531\u5668\u4e0a\u7684 UPnP \u8655\u65bc\u958b\u555f\u72c0\u614b\u3002\u5728\u9032\u884c Mode 2 \u91cd\u7f6e\u5f8c\uff0c\u53d7 Snapshot Replication \u4fdd\u8b77\u7684\u8cc7\u6599\u593e\u5f97\u4ee5\u5fa9\u539f\u3002\u6c92\u6709\u5feb\u7167\u7684\u8cc7\u6599\u593e\u5247\u7121\u6cd5\u5fa9\u539f\uff0c\u4e14\u672c\u6a5f Hyper Backup USB \u5916\u63a5\u786c\u789f\u9023\u540c NAS \u4e00\u8d77\u88ab\u52a0\u5bc6\u3002\u5728\u6b64\u95b1\u8b80\u539f\u6587\uff1a <a href=\"https:\/\/www.reddit.com\/r\/synology\/comments\/1xhyt6w\/hit_with_c3rb3r_ransomware_this_am\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u4eca\u5929\u65e9\u4e0a\u4e2d\u4e86 c3rb3r \u52d2\u7d22\u8edf\u9ad4<\/a>.<\/li>\n\n\n\n<li><strong>QuickConnect \u8a0e\u8ad6\u3002<\/strong> \u767c\u5e16\u8005\u662f\u5728 DSM \u964d\u7d1a\u4e14\u91cd\u65b0\u5b89\u88dd\u986f\u793a\u52a0\u5bc6\u6a94\u6848\u5f8c\u624d\u6ce8\u610f\u5230\u3002\u5728\u56de\u8986\u4e2d\uff0c\u53e6\u4e00\u4f4d\u555f\u7528\u4e86\u5f37\u5bc6\u78bc\u30012FA \u548c QuickConnect \u7684\u8b80\u8005\u8868\u793a\u4ed6\u5011\u4e5f\u906d\u53d7\u4e86\u653b\u64ca\uff0c\u5176\u4ed6\u4eba\u5247\u6307\u51fa\u50c5\u4f7f\u7528\u61c9\u7528\u7a0b\u5f0f\u7684\u4f7f\u7528\u8005\u53ef\u4ee5\u5728 QuickConnect \u4e2d\u5b8c\u5168\u95dc\u9589 DSM \u5b58\u53d6\u6b0a\u9650\u3002\u5728\u6b64\u95b1\u8b80\u539f\u6587\uff1a <a href=\"https:\/\/www.reddit.com\/r\/synology\/comments\/1xi9mhf\/hit_with_c3rb3r_ransomware\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u4e2d\u4e86 C3RB3R \u52d2\u7d22\u8edf\u9ad4<\/a>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u7d9c\u5408\u4f86\u770b\uff0c\u6a21\u5f0f\u975e\u5e38\u6e05\u6670\u3002C3RB3R \u52d2\u7d22\u8edf\u9ad4\u53ea\u9700\u8981\u4e00\u500b\u80fd\u5920\u5b58\u53d6\u7684 DSM \u767b\u5165\u9801\u9762\u5373\u53ef\uff0c\u50c5\u6b64\u800c\u5df2\u3002\u5bc6\u78bc\u548c\u96d9\u91cd\u9a57\u8b49 (2FA) \u6beb\u7121\u4f5c\u7528\uff0c\u56e0\u70ba\u6f0f\u6d1e\u5229\u7528\u662f\u5728\u8eab\u5206\u9a57\u8b49\u4e4b\u524d\u57f7\u884c\u7684\u3002\u9451\u8b58\u5831\u544a\u8b1b\u5f97\u5f88\u660e\u767d\uff1a\u8acb\u6c42\u5230\u9054\u4e86\u5b58\u6709\u6f0f\u6d1e\u7684\u61c9\u7528\u7a0b\u5f0f\uff0c\u5c31\u7b97\u591a\u4e00\u5c64\u5bc6\u78bc\u63d0\u793a\u4e5f\u7121\u6cd5\u89e3\u6c7a\u8a72\u554f\u984c\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u66f4\u6df1\u5165\u7684\u6280\u8853\u5de5\u4f5c\u662f\u4ee5\u4e2d\u6587\u9032\u884c\u7684\u3002\u5fae\u4fe1\u8207\u5c0f\u7d05\u66f8\u7fa4\u7d44\u4e2d\u7684\u53d7\u5bb3\u8005\u5f35\u8cbc\u4e86\u52d2\u7d22\u4fe1\u3001\u6bd4\u5c0d\u6642\u9593\u8ef8\uff0c\u4e26\u4e92\u76f8\u5206\u4eab\u4e0b\u65b9\u6db5\u84cb\u7684 GitHub \u5132\u5b58\u5eab\u3002Facebook \u4e0a\u7684\u53f0\u7063 Synology \u793e\u7fa4 <a href=\"https:\/\/www.facebook.com\/share\/p\/19bP2vavLb\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u4e5f\u6536\u96c6\u4e86\u76f8\u540c\u7684\u5fa9\u539f\u9023\u7d50<\/a> \u4f9b\u5728\u5730\u4f7f\u7528\u8005\u4f7f\u7528\u3002\u9019\u5408\u60c5\u5408\u7406\uff1aSynology \u662f\u4e00\u5bb6\u53f0\u7063\u516c\u53f8\uff0c\u5176\u6700\u5927\u7684\u4f7f\u7528\u8005\u793e\u7fa4\u4ee5\u4e2d\u6587\u70ba\u4e3b\uff0c\u56e0\u6b64\u5927\u91cf\u7684 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u6848\u4f8b\u4ee5\u53ca\u6700\u5feb\u7684\u7279\u5fb5\u6bd4\u5c0d\u90fd\u4f86\u81ea\u9019\u88e1\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Synology \u672c\u8eab\u767c\u5e03\u4e86 <a href=\"https:\/\/www.synology.com\/en-global\/company\/news\/article\/C3RB3R\" target=\"_blank\" rel=\"noreferrer noopener\">\u4e00\u4efd\u5b89\u5168\u6027\u516c\u544a<\/a> \u65bc 2026 \u5e74 10 \u6708 29 \u65e5\u8868\u793a\uff0c\u5df2\u767c\u73fe\u6709\u5a01\u8105\u4efd\u5b50\u5229\u7528 2024 \u5e74 12 \u6708\u4fee\u88dc\u7684\u6f0f\u6d1e\u653b\u64ca\u820a\u7248 DSM\uff0c\u4e26\u547c\u7c72\u6240\u6709\u4eba\u7acb\u5373\u66f4\u65b0\u3002<\/p>\n\n\n\n<h2 id=\"how-c3rb3r-ransomware-gets-in\" class=\"wp-block-heading\">C3RB3R \u52d2\u7d22\u8edf\u9ad4\u662f\u5982\u4f55\u5165\u4fb5\u7684<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u6700\u521d\u7684\u5169\u5929\u5167\uff0c\u5b58\u5728\u5169\u500b\u6f5b\u5728\u7684\u5165\u4fb5\u9014\u5f91\u3002Synology \u96a8\u5f8c\u78ba\u8a8d\u4e86\u8f03\u820a\u7684\u90a3\u4e00\u500b\u3002\u5176 10 \u6708 30 \u65e5\u7684\u96fb\u5b50\u90f5\u4ef6\u6307\u51fa\uff0c\u653b\u64ca\u50c5\u5229\u7528\u4e86 Synology-SA-24:20 \u4e2d\u4fee\u88dc\u7684\u6f0f\u6d1e\uff0c\u4e14 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u8207 PHP2Shell \u5b8c\u5168\u7121\u95dc\u3002\u4e0b\u8868\u986f\u793a\u4e86\u7576\u6642\u8a0e\u8ad6\u7684\u5169\u500b\u5019\u9078\u6f0f\u6d1e\uff0c\u56e0\u70ba\u9019\u5c0d 360 \u6f0f\u6d1e\u4f9d\u7136\u975e\u5e38\u503c\u5f97\u4fee\u88dc\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th><\/th><th>Synology \u8868\u793a<\/th><th>360 \u8868\u793a<\/th><\/tr><\/thead><tbody><tr><td>\u8aee\u8a62<\/td><td><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_24_20\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-24:20<\/a> (Pwn2Own 2024)<\/td><td><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_26_13\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-26:13<\/a><\/td><\/tr><tr><td>CVE<\/td><td>CVE-2024-10441\uff0cCVSS 9.8\uff0c\u7cfb\u7d71\u5916\u639b\u7a0b\u5f0f\u5b88\u8b77\u884c\u7a0b (plugin daemon) \u4e2d\u672a\u7d93\u8eab\u5206\u9a57\u8b49\u7684\u9060\u7aef\u57f7\u884c\u7a0b\u5f0f\u78bc\u6f0f\u6d1e<\/td><td>CVE-2026-13639\uff08\u767b\u5165\u908f\u8f2f\uff09\u8207 CVE-2026-13684\uff08SCGI\uff09\uff0cCVSS \u5747\u70ba 9.8<\/td><\/tr><tr><td>\u4fee\u88dc\u6642\u9593<\/td><td>2024 \u5e74 11 \u6708\u81f3 12 \u6708<\/td><td>2026 \u5e74 9 \u6708 18 \u65e5<\/td><\/tr><tr><td>\u5df2\u4fee\u5fa9\u7248\u672c<\/td><td>DSM 7.2.2-72806 Update 1\u30017.2.1-69057 Update 6\u30017.2-64570 Update 4\u30017.1.1-42962 Update 7<\/td><td>DSM 7.4-90075\u30017.3.2-86009 Update 4\u30017.2.2-72806 Update 9\u30017.2.1-69057 Update 12<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u9451\u8b58\u8b49\u64da\u6307\u51fa\u81f3\u5c11\u5728\u90e8\u5206\u53d7\u5bb3\u8005\u8eab\u4e0a\uff0c\u554f\u984c\u504f\u5411\u8f03\u820a\u7684\u6f0f\u6d1e\u3002Reddit \u4e0a\u6700\u8a73\u7d30\u7684\u5206\u6790\u5831\u544a\u5c07\u5176\u5b58\u7559\u7684\u65e5\u8a8c\u8207\u516c\u958b\u7684 CVE-2024-10441 \u6f0f\u6d1e\u5229\u7528\u7a0b\u5f0f\u6bd4\u5c0d\u6210\u529f\uff0c\u540c\u6642\u4e5f\u6307\u51fa Synology \u5c1a\u672a\u8b49\u5be6\u9019\u4e00\u9ede\uff0c\u4e14\u8a72\u53f0\u6a5f\u5668\u540c\u6a23\u672a\u9054 SA-26:13 \u7684\u4fee\u88dc\u7248\u672c\u3002soimy \u7684\u5206\u6790\u5831\u544a\u63d0\u5230\uff0c\u53d7\u611f\u67d3\u865b\u64ec\u6a5f\u7684\u8a18\u61b6\u9ad4\u65e5\u8a8c\u986f\u793a\u6709\u900f\u904e DSM \u767b\u5165\u5916\u639b\u7a0b\u5f0f\u9032\u884c\u74b0\u5883\u8b8a\u6578\u6ce8\u5165\u7684\u60c5\u6cc1\uff0c\u9019\u8207 CVE-2024-10441 \u4e00\u81f4\uff0c\u4e14\u5728\u7206\u767c\u524d\u5e7e\u5929 GitHub \u4e0a\u5c31\u51fa\u73fe\u4e86\u5229\u7528\u767b\u5165\u4f7f\u7528\u8005\u540d\u7a31\u6b04\u4f4d\u7684\u516c\u958b\u6982\u5ff5\u9a57\u8b49 (PoC)\u3002\u5728\u4e09\u500b\u6709\u8a18\u9304\u7684\u6551\u63f4\u6848\u4f8b\u4e2d\uff0c\u6709\u5169\u500b\u662f\u5728\u4f7f\u7528 DS918+ \u5f15\u5c0e\u7a0b\u5f0f\u7684\u975e\u539f\u5ee0\u786c\u9ad4\uff08\u9ed1\u7fa4\u6689\uff09\u4e0a\u904b\u4f5c\uff0c\u5176\u4e2d\u4e00\u53f0\u904b\u884c\u7684\u662f DSM 7.2-64570 Update 3\uff0c\u8ddd\u96e2\u4fee\u5fa9 CVE-2024-10441 \u525b\u597d\u53ea\u5dee\u4e00\u500b\u66f4\u65b0\u3002\u975e\u539f\u5ee0\u786c\u9ad4\u7121\u6cd5\u8f15\u6613\u5b89\u88dd\u5b98\u65b9\u66f4\u65b0\uff0c\u9019\u4f7f\u5176\u6210\u70ba\u6700\u5bb9\u6613\u53d7\u653b\u64ca\u7684\u76ee\u6a19\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5be6\u969b\u7684\u7d50\u8ad6\u4e26\u672a\u6539\u8b8a\uff1a\u8acb\u66f4\u65b0\u81f3\u5305\u542b\u9019\u5169\u4efd\u5b89\u5168\u901a\u5831\u4fee\u88dc\u7a0b\u5f0f\u7684\u7248\u672c\uff0c\u4e26\u505c\u6b62\u5c07 DSM \u66b4\u9732\u65bc\u7db2\u969b\u7db2\u8def\u4e0a\u3002\u4f46\u4ecd\u6709\u4e00\u500b\u7591\u554f\uff1a\u5982\u679c\u6f0f\u6d1e\u65e9\u5728 2024 \u5e74 12 \u6708\u5c31\u5df2\u4fee\u88dc\uff0c\u70ba\u4ec0\u9ebc\u6703\u6709\u5982\u6b64\u591a\u7684 NAS \u5728 2026 \u5e74 10 \u6708\u7684\u540c\u4e00\u5169\u5929\u5167\u906d\u5230 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u653b\u64ca\uff0c\u751a\u81f3\u5305\u62ec\u4e00\u4e9b\u64c1\u6709\u8005\u8a8d\u70ba\u5df2\u7d93\u662f\u6700\u65b0\u7248\u672c\u7684\u88dd\u7f6e\uff1f<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u63d0\u65e9\u690d\u5165\uff0c\u5b9a\u6642\u5f15\u7206<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5011\u7684\u89e3\u8b80\uff08\u9019\u662f\u6211\u5011\u81ea\u8eab\u7684\u5206\u6790\uff0c\u800c\u975e Synology \u5b98\u65b9\u8868\u614b\uff09\u662f\uff1aC3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u5165\u4fb5\u8207\u52a0\u5bc6\u662f\u5169\u500b\u7368\u7acb\u7684\u4e8b\u4ef6\u3002\u8b49\u64da\u6307\u5411\u9019\u500b\u65b9\u5411\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u5f8c\u9580\u5148\u88ab\u690d\u5165\u3002<\/strong> \u5728\u4e0b\u65b9\u7684\u5c0f\u7d05\u66f8\u6848\u4f8b\u4e2d\uff0c\u5f8c\u9580 shell \u5728\u4efb\u4f55\u6a94\u6848\u88ab\u52a0\u5bc6\u4e4b\u524d\uff0c\u5c31\u5df2\u7d93\u5728 NAS \u4e0a\u6f5b\u4f0f\u4e86 37 \u5929\uff0c\u4e26\u4ee5 root \u6b0a\u9650\u958b\u555f\u4e86 telnet\u3002<\/li>\n\n\n\n<li><strong>\u5b83\u80fd\u5728\u7cfb\u7d71\u66f4\u65b0\u5f8c\u5b58\u7559\u3002<\/strong> \u4f4d\u65bc\u4e0b\u65b9\u7684 cron \u689d\u76ee <code>\/etc\/cron.d\/synot*<\/code> \u6703\u81ea\u52d5\u91cd\u65b0\u5efa\u7acb\uff0c\u4e14\u81f3\u5c11\u6709\u4e00\u540d\u53d7\u5bb3\u8005\u767c\u73fe\u5373\u4f7f\u5728\u5347\u7d1a\u81f3\u6700\u65b0 DSM \u5f8c\uff0c\u9019\u4e9b\u689d\u76ee\u4f9d\u7136\u5b58\u5728\u3002\u66f4\u65b0\u5835\u4f4f\u4e86\u6f0f\u6d1e\uff0c\u4f46\u4ecd\u5c07\u5165\u4fb5\u8005\u7559\u5728\u4e86\u7cfb\u7d71\u5167\u90e8\u3002<\/li>\n\n\n\n<li><strong>\u5f15\u7206\u662f\u540c\u6b65\u767c\u751f\u7684\u3002<\/strong> \u5728\u4e0d\u540c\u6642\u9593\u3001\u4e0d\u540c\u7cfb\u7d71\u7248\u672c\u53d7\u5bb3\u7684 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u53d7\u5bb3 NAS\uff0c\u5927\u7d04\u5728 48 \u5c0f\u6642\u4e4b\u5167\u540c\u6642\u958b\u59cb\u52a0\u5bc6\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u7a2e\u6a21\u5f0f\u7b26\u5408\u653b\u64ca\u8005\u7684\u884c\u70ba\u7279\u5fb5\uff1a\u4ed6\u5011\u6578\u6708\u4f86\u5728\u672a\u4fee\u88dc\u6f0f\u6d1e\u7684 NAS \u4e0a\u690d\u5165 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u5f8c\u9580\uff0c\u7136\u5f8c\u9078\u64c7\u6642\u6a5f\u9060\u7aef\u5f15\u7206\u3002\u4ed6\u5011\u9078\u64c7\u7684\u6642\u6a5f\u6b63\u662f PHP2Shell \u767c\u5e03\u7684\u90a3\u4e00\u9031\uff0c\u7576\u6642\u6bcf\u4f4d Synology \u7ba1\u7406\u54e1\u90fd\u5728\u5fd9\u8457\u4fee\u88dc\uff0c\u8a31\u591a NAS \u525b\u5b8c\u6210\u66f4\u65b0\uff0c\u64c1\u6709\u4e00\u7a2e\u5b89\u5168\u7684\u932f\u89ba\u3002Synology \u660e\u78ba\u8868\u793a PHP2Shell \u4e26\u975e\u5165\u4fb5\u9014\u5f91\uff0c\u800c\u662f\u63a9\u8b77\u3002\u6559\u8a13\u662f\uff1a\u4efb\u4f55\u66fe\u5728\u672a\u4fee\u88dc\u72c0\u614b\u4e0b\u66b4\u9732\u65bc\u7db2\u8def\u7684 NAS\uff0c\u5728\u7d93\u904e\u4ed4\u7d30\u6aa2\u67e5\u4e4b\u524d\u90fd\u61c9\u8996\u70ba\u5df2\u88ab\u5165\u4fb5\uff0c\u800c\u9019\u6b63\u662f Synology \u6aa2\u67e5\u6e05\u55ae\u7684\u7b2c\u4e00\u6b65\u8981\u6c42\u60a8\u505a\u7684\u4e8b\u3002<\/p>\n\n\n\n<h2 id=\"first-response-in-4-steps\" class=\"wp-block-heading\">\u61c9\u5c0d C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684 4 \u500b\u7dca\u6025\u6b65\u9a5f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u4f60\u73fe\u5728\u767c\u73fe <code>L0CK3D<\/code> \u6a94\u6848\uff0c\u63a5\u4e0b\u4f86\u5341\u5206\u9418\u7684\u8655\u7f6e\u9806\u5e8f\u5c07\u6c7a\u5b9a\u662f\u5426\u9084\u6709\u53ef\u80fd\u5fa9\u539f\u3002\u89e3\u9396\u6a94\u6848\u7684\u91d1\u9470\u50c5\u5b58\u5728\u65bc\u6b63\u5728\u57f7\u884c\u7684 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7a0b\u5e8f\u4e2d\u3002\u91cd\u555f\u6a5f\u5668\u3001\u57f7\u884c <code>kill -9<\/code> \u6216\u91cd\u65b0\u5b89\u88dd DSM \u90fd\u6703\u5c07\u5176\u6467\u6bc0\u3002<\/p>\n\n\n<div id=\"rank-math-howto\" class=\"rank-math-block\" >\n<div class=\"rank-math-howto-description\">\n\n<\/div>\n\n<div class=\"rank-math-steps\">\n<div id=\"step-1\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\u5207\u65b7\u7db2\u8def\uff0c\u800c\u975e\u96fb\u6e90<\/h3>\n<div class=\"rank-math-step-content\"><p>\u62d4\u6389 WAN \u7aef\u7db2\u7dda\uff0c\u6216\u79fb\u9664\u8def\u7531\u5668\u4e0a\u7684\u901a\u8a0a\u57e0\u8f49\u767c (port forward) \u548c UPnP \u5c0d\u6620\u3002\u5207\u52ff\u5c07 NAS \u95dc\u6a5f\u6216\u91cd\u555f\u3002\u95dc\u9589\u4efb\u4f55\u975e\u60a8\u81ea\u884c\u958b\u555f\u7684 SSH \u6216 telnet \u5b58\u53d6\u6b0a\u9650\u3002<\/p>\n<\/div>\n<\/div>\n<div id=\"step-2\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\u5c0b\u627e\u4e26\u51cd\u7d50\u52a0\u5bc6\u7a0b\u5e8f<\/h3>\n<div class=\"rank-math-step-content\"><p>\u900f\u904e SSH \u4ee5 root \u8eab\u5206\u767b\u5165\uff0c\u5217\u51fa\u53ef\u57f7\u884c\u6a94\u5df2\u88ab\u522a\u9664\u7684\u7a0b\u5e8f\uff0c\u7136\u5f8c\u4f7f\u7528 kill -STOP \u548c PID \u767c\u9001 SIGSTOP\u3002\u88ab\u51cd\u7d50\u7684\u7a0b\u5e8f\u6703\u4fdd\u7559\u5176\u8a18\u61b6\u9ad4\uff0c\u800c\u5176\u8a18\u61b6\u9ad4\u4e2d\u5c31\u542b\u6709\u5de5\u4f5c\u968e\u6bb5\u91d1\u9470 (session key)\u3002<\/p>\n<\/div>\n<\/div>\n<div id=\"step-3\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\u50be\u5370 (Dump) \u88ab\u51cd\u7d50\u7a0b\u5e8f\u7684\u8a18\u61b6\u9ad4<\/h3>\n<div class=\"rank-math-step-content\"><p>\u4f9d\u7167 Benjamin-zlt \u5132\u5b58\u5eab\u7684\u6b65\u9a5f\uff0c\u5c07\u8a72 PID \u5728 proc \u6a94\u6848\u7cfb\u7d71\u4e2d\u7684\u53ef\u5beb\u5165\u8a18\u61b6\u9ad4\u8b80\u53d6\u4e26\u5132\u5b58\u5230\u7368\u7acb\u7684\u78c1\u789f\u4e0a\u3002\u82e5\u5728\u865b\u64ec\u6a5f\u4e0a\u904b\u884c\uff0c\u900f\u904e Hypervisor \u64f7\u53d6\u5b8c\u6574\u865b\u64ec\u6a5f\u8a18\u61b6\u9ad4\u5feb\u7167\u540c\u6a23\u6709\u6548\u3002<\/p>\n<\/div>\n<\/div>\n<div id=\"step-4\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\u4fdd\u7559\u8b49\u64da\uff0c\u7136\u5f8c\u9032\u884c\u6e05\u7406<\/h3>\n<div class=\"rank-math-step-content\"><p>\u8acb\u52ff\u52d5\u4efb\u4f55 L0CK3D \u6a94\u6848\u8207\u52d2\u7d22\u4fe1\u3002\u5c07\u4ecd\u53ef\u8b80\u53d6\u7684\u8cc7\u6599\u8907\u88fd\u51fa\u4f86\u3002\u53ea\u6709\u5728\u8a18\u61b6\u9ad4\u5b89\u5168\u4fdd\u5b58\u5f8c\uff0c\u624d\u79fb\u9664 synot cron \u9805\u76ee\u3001\u66f4\u63db\u6240\u6709\u5bc6\u78bc\uff0c\u4e26\u66f4\u65b0 DSM\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n\n\n\n<p class=\"wp-block-paragraph\">\u6b65\u9a5f 2 \u548c 3 \u6240\u9700\u7684\u6307\u4ee4\u5982\u4e0b\u3002\u57f7\u884c\u4efb\u4f55\u6307\u4ee4\u524d\u8acb\u5148\u95b1\u8b80\u5132\u5b58\u5eab\u8aaa\u660e\uff0c\u56e0\u70ba\u5177\u9ad4\u7d30\u7bc0\u53d6\u6c7a\u65bc\u60a8\u624b\u982d\u4e0a\u7684\u57f7\u884c\u6a94\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># \u6b65\u9a5f 2\uff1a\u5c0b\u627e\u52a0\u5bc6\u7a0b\u5e8f\uff08\u5176\u53ef\u57f7\u884c\u6a94\u6703\u986f\u793a\u70ba\u5df2\u522a\u9664\uff09<\/code><\/pre>\n\n\n\n<h2 id=\"three-github-rescue-cases\" class=\"wp-block-heading\">ls -l \/proc\/*\/exe 2&gt;\/dev\/null | grep deleted<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"># \u51cd\u7d50\u5b83\u3002\u5207\u52ff\u5728\u6b64\u8655\u4f7f\u7528 kill -9\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>kill -STOP &lt;PID&gt;<\/th><th>grep State \/proc\/&lt;PID&gt;\/status     # \u61c9\u986f\u793a T (stopped)<\/th><th># \u5c0b\u627e\u4f7f\u5176\u6301\u7e8c\u904b\u4f5c\u7684\u6392\u7a0b\u9805\u76ee<\/th><th>ls -l \/etc\/cron.d\/ | grep synot<\/th><\/tr><\/thead><tbody><tr><td><a href=\"https:\/\/github.com\/soimy\/c3rb3r-rescue\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u80fd\u5426\u89e3\u5bc6\uff1f\u4e09\u500b GitHub \u6551\u63f4\u6848\u4f8b\u5206\u6790<\/a><\/td><td>\u76ee\u524d\u6c92\u6709\u901a\u7528\u7684 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u89e3\u5bc6\u5de5\u5177\uff0c\u4efb\u4f55\u5ba3\u7a31\u8ca9\u552e\u89e3\u5bc6\u5de5\u5177\u7684\u4eba\u90fd\u5728\u6191\u7a7a\u731c\u6e2c\u3002\u76ee\u524d\u6709\u7684\u53ea\u662f\u4e09\u500b\u8a73\u7d30\u7684\u6848\u4f8b\u7814\u7a76\uff0c\u80fd\u78ba\u5207\u544a\u8a34\u60a8\u4f55\u6642\u624d\u80fd\u6210\u529f\u5fa9\u539f\u3002<\/td><td>\u5132\u5b58\u5eab<\/td><td>\u6a5f\u5668<\/td><\/tr><tr><td><a href=\"https:\/\/github.com\/Benjamin-zlt\/c3rb3r-baremetal-rescue\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u7d50\u679c<\/a><\/td><td>\u539f\u56e0<\/td><td>\u5132\u5b58\u5eab<\/td><td>soimy\/c3rb3r-rescue<\/td><\/tr><tr><td><a href=\"https:\/\/github.com\/lllong1377\/c3rb3r-never-rebooted-still-no-key\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u904b\u884c GitLab \u7684 Proxmox VE \u865b\u64ec\u6a5f\u4e2d\u7684 DSM<\/a><\/td><td>\u5df2\u5fa9\u539f<\/td><td>16 GiB \u7684\u865b\u64ec\u6a5f RAM \u526f\u672c\u4e2d\u5305\u542b 48 \u4f4d\u5143\u7d44\u7684\u5de5\u4f5c\u968e\u6bb5\u91d1\u9470\u3002GitLab \u5df2\u6210\u529f\u5fa9\u539f 80 \u500b\u5c08\u6848\u548c 9,253 \u500b LFS \u7269\u4ef6\u3002<\/td><td>\u52a0\u5bc6\u7a0b\u5f0f\u5728\u5927\u7d04 30 \u5c0f\u6642\u524d\u5c31\u5df2\u7d93\u7d50\u675f\u57f7\u884c\u3002\u5b8c\u6574\u7684 RAM \u8207 Swap \u8a18\u61b6\u9ad4\u6383\u63cf\u5747\u672a\u627e\u5230\u91d1\u9470\u3002<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e09\u500b\u5132\u5b58\u5eab\u662f\u6700\u91cd\u8981\u7684\u4e00\u7bc7\uff0c\u56e0\u70ba\u5b83\u7684\u6a19\u984c\u672c\u8eab\u5c31\u662f\u4e00\u500b\u6559\u8a13\uff1a\u5f9e\u672a\u91cd\u958b\u6a5f\u4e26\u4e0d\u4ee3\u8868\u53ef\u4ee5\u5fa9\u539f\u3002\u771f\u6b63\u91cd\u8981\u7684\u662f C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7a0b\u5e8f\u662f\u5426\u4ecd\u5728\u57f7\u884c\u4e2d\u3002\u4e00\u65e6\u5b83\u7d50\u675f\u57f7\u884c\uff0c\u5c31\u6703\u5c07\u5176\u91d1\u9470\u7de9\u885d\u5340\u6b78\u96f6\uff0c\u91d1\u9470\u4e5f\u5c31\u96a8\u4e4b\u6d88\u5931\u3002\u5728\u67d0\u500b\u53d7\u5bb3\u8005\u8a2d\u5099\u4e0a\u5fa9\u539f\u7684\u91d1\u9470\u5c0d\u53e6\u4e00\u500b\u53d7\u5bb3\u8005\u4f86\u8aaa\u4e5f\u6beb\u7121\u4f5c\u7528\uff0c\u56e0\u70ba\u6bcf\u6b21\u57f7\u884c\u90fd\u6703\u7522\u751f\u65b0\u7684\u5de5\u4f5c\u968e\u6bb5\u91d1\u9470\u3002<\/p>\n\n\n\n<h2 id=\"why-the-key-lives-in-memory\" class=\"wp-block-heading\">\u70ba\u4ec0\u9ebc\u91d1\u9470\u50c5\u5b58\u5728\u65bc\u8a18\u61b6\u9ad4\u4e2d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Benjamin-zlt \u7684\u5206\u6790\u8a73\u7d30\u8aaa\u660e\u4e86 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u6a94\u6848\u683c\u5f0f\uff0c\u4e26\u540c\u6642\u89e3\u91cb\u4e86\u70ba\u4ec0\u9ebc\u9019\u7a2e\u65b9\u6cd5\u53ef\u884c\uff0c\u4ee5\u53ca\u70ba\u4ec0\u9ebc\u901a\u5e38\u4e0d\u53ef\u884c\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u6bcf\u500b\u6a94\u6848\u90fd\u6703\u7372\u5f97\u7368\u7acb\u4e14\u96a8\u6a5f\u7684 ChaCha8 \u91d1\u9470\u3002<\/strong> \u8a72\u91d1\u9470\u4f7f\u7528 AES-256-CBC \u8207\u5de5\u4f5c\u968e\u6bb5\u4e3b\u91d1\u9470\uff08session master key\uff09\u9032\u884c\u5305\u88f9\uff0c\u4e26\u5132\u5b58\u5728\u6a94\u6848\u672b\u7aef\u7684 588 \u4f4d\u5143\u7d44\u6a19\u7c64\uff08trailer\uff09\u4e2d\u3002<\/li>\n\n\n\n<li><strong>\u5de5\u4f5c\u968e\u6bb5\u4e3b\u91d1\u9470\u9577\u5ea6\u70ba 48 \u4f4d\u5143\u7d44\uff1a<\/strong> \u5305\u542b 16 \u4f4d\u5143\u7d44\u7684 IV \u8207 32 \u4f4d\u5143\u7d44\u7684 AES \u91d1\u9470\u3002\u5b83\u7d55\u4e0d\u6703\u5beb\u5165\u78c1\u789f\uff0c\u800c\u662f\u7531\u6b63\u5728\u57f7\u884c\u7684\u7a0b\u5e8f\u5167\u90e8\u7684\u5168\u57df\u6307\u6a19\u6307\u5411\u5b83\u3002<\/li>\n\n\n\n<li><strong>\u6a94\u6848\u672b\u7aef\u7684\u6a19\u7c64\u9084\u5305\u542b\u4e00\u500b\u7531\u653b\u64ca\u8005\u516c\u9470\u6240\u5305\u88f9\u7684\u8cc7\u6599\u5340\u584a\uff08blob\uff09<\/strong> (RSA-2048)\uff0c\u56e0\u6b64\u82e5\u6c92\u6709\u6b63\u5728\u57f7\u884c\u7684\u7a0b\u5e8f\uff0c\u5c31\u53ea\u6709\u653b\u64ca\u8005\u624d\u80fd\u5fa9\u539f\u8a72\u5de5\u4f5c\u968e\u6bb5\u91d1\u9470\u3002<\/li>\n\n\n\n<li><strong>\u4e26\u975e\u6240\u6709\u6a94\u6848\u90fd\u88ab\u5b8c\u5168\u52a0\u5bc6\u3002<\/strong> \u5728 400 \u500b\u6a94\u6848\u7684\u6a23\u672c\u4e2d\uff0c\u7d04\u6709 56% \u4f7f\u7528\u5206\u6bb5\u6a21\u5f0f\uff0c31% \u50c5\u52a0\u5bc6\u4e86\u524d 1 MiB\uff0c\u800c 13% \u5247\u662f\u9996\u5c3e\u5b8c\u6574\u52a0\u5bc6\u3002\u90e8\u5206\u52a0\u5bc6\u7684\u6a94\u6848\u4ecd\u7136\u7121\u6cd5\u76f4\u63a5\u8b80\u53d6\uff0c\u4f46\u9801\u5c3e\uff08footer\uff09\u9451\u5225\u80fd\u8b93\u60a8\u77e5\u9053\u9084\u5269\u4e0b\u4ec0\u9ebc\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u56e0\u6b64\uff0cC3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u5f31\u9ede\u975e\u5e38\u72f9\u7a84\u4e14\u5177\u6709\u6642\u6548\u6027\uff1a\u52a0\u5bc6\u7a0b\u5f0f\u5728\u6574\u500b\u5de5\u4f5c\u968e\u6bb5\u671f\u9593\u90fd\u6703\u5c07\u4e3b\u91d1\u9470\u4fdd\u7559\u5728\u8a18\u61b6\u9ad4\u4e2d\u3002\u53ea\u8981\u5728\u5176\u57f7\u884c\u6642\u51cd\u7d50\u5b83\uff0c\u60a8\u5c31\u80fd\u5c07\u91d1\u9470\u63d0\u53d6\u51fa\u4f86\u3002\u4e00\u65e6\u932f\u904e\u8a72\u6642\u6a5f\uff0c\u60a8\u5c31\u53ea\u5269\u4e0b\u516c\u9470\u8cc7\u6599\u5340\u584a\uff0c\u800c\u90a3\u662f\u88ab\u8a2d\u8a08\u70ba\u7121\u6cd5\u7834\u89e3\u7684\u3002<\/p>\n\n\n\n<h2 id=\"victim-story-50-tb-no-snapshots\" class=\"wp-block-heading\">\u53d7\u5bb3\u8005\u6545\u4e8b\uff1a50 TB \u8cc7\u6599\u4e14\u6c92\u6709\u5feb\u7167<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\u8005\u300c\u67ef\u57fa\u7231\u597d\u8005\u300d\u65bc 2026 \u5e74 10 \u6708 29 \u65e5\u5728\u5c0f\u7d05\u66f8\u4e0a\u767c\u5e03\u7684\u8a73\u7d30\u8a18\u9304\uff0c\u8a18\u9304\u4e86\u5176 NAS \u793e\u7fa4\u4e2d\u4e00\u540d\u6210\u54e1\u5ea6\u904e\u7684\u591c\u665a\u3002\u8a72\u6210\u54e1\u767c\u73fe\u4e86 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u52d2\u7d22\u4fe1\uff0c\u78ba\u8a8d\u4e86 C3RB3R INSTRUCTIONS \u6a19\u982d\uff0c\u4e26\u5dee\u9ede\u8981\u8cfc\u8cb7\u6bd4\u7279\u5e63\uff0c\u76f4\u5230\u793e\u7fa4\u6210\u54e1\u5f15\u5c0e\u4ed6\u67e5\u770b GitHub \u7684\u6848\u4f8b\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u63a5\u8457\uff0c\u4ed6\u900f\u904e SSH \u4f7f\u7528 AI \u7a0b\u5f0f\u8a2d\u8a08\u52a9\u624b\u9032\u884c\u8abf\u67e5\u3002\u52a9\u624b\u627e\u5230\u4e26\u51cd\u7d50\u4e86\u52a0\u5bc6\u7a0b\u5f0f\uff0c\u56e0\u6b64\u5728\u90a3\u4e4b\u5f8c\u5c31\u6c92\u6709\u65b0\u7684\u8cc7\u6599\u88ab\u52a0\u5bc6\u3002\u52a9\u624b\u9084\u767c\u73fe\u4e00\u500b\u53ef\u80fd\u7684\u5f8c\u9580 shell \u5df2\u7d93\u5728 NAS \u4e0a\u6f5b\u4f0f\u4e86 37 \u5929\uff0c\u4e26\u4ee5 root \u6b0a\u9650\u555f\u7528\u4e86 telnet\uff0c\u9019\u610f\u5473\u8457\u6700\u521d\u7684\u5165\u4fb5\u8207\u6b63\u5f0f\u52a0\u5bc6\u76f8\u9694\u4e86\u4e00\u500b\u6708\u4ee5\u4e0a\u3002\u5b83\u64b0\u5beb\u4e86\u8b49\u64da\u6536\u96c6\u8173\u672c\uff0c\u4e26\u6b63\u78ba\u5730\u7b49\u5f85\u4ed6\u78ba\u8a8d\u5f8c\u624d\u4ee5 root \u8eab\u4efd\u57f7\u884c\u4efb\u4f55\u64cd\u4f5c\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5e78\u904b\u7684\u662f\uff0cC3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u52a0\u5bc6\u901f\u5ea6\u5f88\u6162\u3002\u9762\u5c0d\u8d85\u904e 50 TB \u9700\u8981\u8655\u7406\u7684\u8cc7\u6599\uff0c\u52a0\u5bc6\u7a0b\u5f0f\u624d\u525b\u52a0\u5bc6\u5230\u4ed6 2024 \u5e74\u7684\u7167\u7247\uff0c\u800c\u9019\u4e9b\u7167\u7247\u5728\u96f2\u7aef\u786c\u789f\u4e0a\u6709\u51b7\u5099\u4efd\u3002\u4ed6\u5c07\u5de5\u4f5c\u8cc7\u6599\u79fb\u81f3\u8f03\u5c0f\u7684 NAS\uff0c\u4e26\u66ab\u6642\u505c\u7528\u52a0\u5bc6\u5132\u5b58\u7a7a\u9593\u4ee5\u5f85\u5f8c\u7e8c\u8655\u7406\u3002\u4ed6\u81ea\u5df1\u7684\u7e3d\u7d50\u975e\u5e38\u76f4\u63a5\uff1a\u4ed6\u6c92\u6709\u5feb\u7167\uff0c\u5982\u679c\u6709\u5feb\u7167\uff0c\u9019\u672c\u4f86\u5f88\u5bb9\u6613\u4fee\u5fa9\u3002X \u4e0a\u7684\u7b2c\u4e8c\u4f4d\u53d7\u5bb3\u8005\u5247\u5f9e\u53e6\u4e00\u500b\u89d2\u5ea6\u7e3d\u7d50\u4e86\u76f8\u540c\u7684\u6559\u8a13\uff1aRAID 6 \u52a0\u4e0a\u4e09\u5957\u5099\u4efd\uff0c\u5168\u90e8\u90fd\u5728\u540c\u53f0\u6a5f\u5668\u4e0a\uff0c\u7d50\u679c\u5168\u90e8\u4e00\u8d77\u88ab\u52a0\u5bc6\u4e86\u3002<\/p>\n\n\n\n<h2 id=\"how-we-keep-backups-safe\" class=\"wp-block-heading\">\u6211\u5011\u5982\u4f55\u907f\u514d\u5099\u4efd\u53d7\u5230 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u4fb5\u5bb3<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u8ff0\u6bcf\u500b\u8cc7\u6599\u907a\u5931\u7684\u6545\u4e8b\u90fd\u6709\u76f8\u540c\u7684\u6a21\u5f0f\uff1a\u5099\u4efd\u53ef\u4ee5\u5f9e\u88ab\u5165\u4fb5\u7684\u6a5f\u5668\u5b58\u53d6\u3002C3RB3R \u52d2\u7d22\u8edf\u9ad4\u6703\u52a0\u5bc6\u906d\u5230\u5165\u4fb5\u7684 DSM \u6240\u80fd\u5beb\u5165\u7684\u6240\u6709\u5167\u5bb9\uff0c\u56e0\u6b64\u89e3\u6c7a\u65b9\u6848\u662f\u5c07\u81f3\u5c11\u4e00\u4efd\u526f\u672c\u5b58\u653e\u5728 DSM \u5b8c\u5168\u7121\u6cd5\u5beb\u5165\u7684\u5730\u65b9\u3002\u9019\u5c31\u662f\u6211\u5011\u70ba\u6211\u5011\u8a17\u7ba1\u7684\u7db2\u7ad9\u6240\u63a1\u7528\u7684\u505a\u6cd5\uff0c\u4e14\u7b26\u5408 3-2-1-1-0 \u539f\u5247\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\u898f\u5247<\/th><th>\u610f\u7fa9<\/th><th>\u6211\u5011\u7684\u505a\u6cd5<\/th><\/tr><\/thead><tbody><tr><td>3<\/td><td>\u4e09\u4efd\u8cc7\u6599\u526f\u672c<\/td><td>\u904b\u4f5c\u4e2d\u7684 VM\u3001\u7b2c\u4e8c\u53f0 NAS \u4e0a\u7684\u526f\u672c\uff0c\u4ee5\u53ca\u6392\u7a0b\u532f\u51fa\u6a94\u6848<\/td><\/tr><tr><td>2<\/td><td>\u5169\u7a2e\u4e0d\u540c\u7684\u5132\u5b58\u5a92\u9ad4<\/td><td>NAS \u5132\u5b58\u7a7a\u9593\u5916\u52a0\u5916\u63a5 USB \u786c\u789f\u8207\u96f2\u7aef\u786c\u789f<\/td><\/tr><tr><td>1<\/td><td>\u4e00\u4efd\u7570\u5730\u526f\u672c<\/td><td>\u900f\u904e Cloud Sync \u5c07\u532f\u51fa\u6a94\u6848\u540c\u6b65\u81f3 Google Drive<\/td><\/tr><tr><td>1<\/td><td>\u4e00\u4efd\u96e2\u7dda\u6216\u4e0d\u53ef\u8b8a\uff08immutable\uff09\u526f\u672c<\/td><td>\u5ba2\u9ad4\u6a5f\uff08guest\uff09\u7121\u6cd5\u5b58\u53d6\u7684\u5be6\u9ad4\u4e3b\u6a5f\u7aef VM \u5feb\u7167\uff0c\u52a0\u4e0a\u62d4\u9664\u9023\u7dda\u7684 USB \u532f\u51fa\u6a94\u6848<\/td><\/tr><tr><td>0<\/td><td>\u9084\u539f\u96f6\u932f\u8aa4<\/td><td>\u7576\u6211\u5011\u5728\u4e3b\u6a5f\u4e4b\u9593\u642c\u79fb VM \u6642\uff0c\u6211\u5011\u6703\u5be6\u969b\u5f9e\u526f\u672c\u9032\u884c\u9084\u539f\u4e26\u958b\u6a5f\u6e2c\u8a66<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5728 Virtual DSM \u5167\u90e8\u57f7\u884c Docker\uff0c\u800c\u975e\u5728\u5be6\u9ad4\u4e3b\u6a5f\u4e0a\u57f7\u884c<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5011\u7684 WordPress \u5bb9\u5668\u4e26\u975e\u76f4\u63a5\u57f7\u884c\u65bc\u5be6\u9ad4 NAS \u4e0a\u3002\u5b83\u5011\u57f7\u884c\u65bc Virtual DSM \u5ba2\u9ad4\u6a5f\u5167\u90e8\uff0c\u800c\u8a72\u5ba2\u9ad4\u6a5f\u5247\u53d7\u5230\u5be6\u9ad4\u4e3b\u6a5f\u4e0a\u7684 Virtual Machine Manager \u6240\u4fdd\u8b77\u3002\u5982\u679c C3RB3R \u52d2\u7d22\u8edf\u9ad4\u5728\u5ba2\u9ad4\u6a5f\u5167\u90e8\u53d6\u5f97 root \u6b0a\u9650\uff0c\u5b83\u53ea\u80fd\u63a7\u5236\u8a72\u5ba2\u9ad4\u6a5f\uff0c\u7121\u6cd5\u5f71\u97ff\u5176\u4ed6\u5730\u65b9\u3002\u5ba2\u9ad4\u6a5f\u7684\u5feb\u7167\u5132\u5b58\u65bc\u5be6\u9ad4\u4e3b\u6a5f\u5132\u5b58\u7a7a\u9593\u4e2d\uff0c\u7368\u7acb\u65bc\u5ba2\u9ad4\u6a5f\u7684\u6a94\u6848\u7cfb\u7d71\u4e4b\u5916\uff0c\u56e0\u6b64 VM \u5167\u90e8\u7684\u52d2\u7d22\u8edf\u9ad4\u6839\u672c\u770b\u4e0d\u5230\u5b83\u5011\uff0c\u66f4\u4e0d\u7528\u8aaa\u52a0\u5bc6\u6216\u522a\u9664\u4e86\u3002\u5fa9\u539f\u53ea\u9700\u82b1\u8cbb\u6578\u5206\u9418\u9032\u884c\u5feb\u7167\u56de\u6efe\uff08rollback\uff09\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">VMM Pro \u589e\u52a0\u4e86\u5c07\u5176\u8f49\u8b8a\u70ba\u771f\u6b63\u5099\u4efd\u7684\u529f\u80fd\uff1a\u4fdd\u8b77\u8a08\u756b\u6703\u70ba VM \u5efa\u7acb\u5feb\u7167\u4e26\u5c07\u5176\u8907\u88fd\u5230\u53e2\u96c6\u4e2d\u7684\u7b2c\u4e8c\u53f0 NAS\uff0c\u56e0\u6b64\u5373\u4f7f\u5be6\u9ad4\u4e3b\u6a5f\u640d\u58de\u4e5f\u80fd\u7372\u5f97\u4fdd\u969c\u3002\u6211\u5011\u7684\u53e2\u96c6\u7531\u4e00\u53f0 DS1621xs+ \u548c\u4e00\u53f0 DS1525+ \u7d44\u6210\uff0c\u5f7c\u6b64\u4e92\u76f8\u8907\u88fd\u3002\u6211\u5011\u55ae\u7368\u64b0\u5beb\u4e86 <a href=\"https:\/\/synopower.club\/zh\/%e6%96%87%e4%bb%b6\/vmm-backup-google-drive-cloud-sync\/\">\u6392\u7a0b\u532f\u51fa\u8207\u900f\u904e Cloud Sync \u540c\u6b65\u81f3 Google Drive<\/a> \u90e8\u5206\u7684\u5167\u5bb9\uff0c\u800c <a href=\"https:\/\/synopower.club\/zh\/%e6%96%87%e4%bb%b6\/synology-virtual-machine-manager-vs-vmm-pro\/\">\u514d\u8cbb\u7248 VMM \u8207 VMM Pro \u7684\u6bd4\u8f03<\/a> \u5247\u8aaa\u660e\u4e86\u54ea\u4e9b\u90e8\u5206\u9700\u8981\u6388\u6b0a\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"eager\" decoding=\"async\" width=\"1410\" height=\"243\" sizes=\"auto, (max-width: 1410px) 100vw, 1410px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware.webp\" alt=\"VMM Pro \u4fdd\u8b77\u8a08\u5283\u5c07 Virtual DSM \u5ba2\u9ad4\u6a5f\u8907\u88fd\u5099\u4efd\u81f3\u7b2c\u4e8c\u53f0 NAS\uff0c\u4f5c\u70ba C3RB3R \u52d2\u7d22\u8edf\u9ad4\u9632\u79a6\u624b\u6bb5\" class=\"wp-image-22237\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware.webp 1410w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware-300x52.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware-1024x176.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware-768x132.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware-18x3.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware-600x103.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware-400x69.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/vmm-protection-plan-c3rb3r-ransomware-1000x172.webp 1000w\"  fetchpriority=\"high\"\/><figcaption class=\"wp-element-caption\">\u6211\u5011\u7684 Virtual DSM \u5ba2\u9ad4\u6a5f spc_4C8G\uff1a\u6bcf 12 \u5c0f\u6642\u9032\u884c\u4e00\u6b21\u5feb\u7167\uff0c\u4e26\u5f9e DS1621xs+ \u8907\u88fd\u5230 DS1525+\u3002<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5982\u679c\u60a8\u76f4\u63a5\u5728 DSM \u4e0a\u57f7\u884c Docker\uff0c\u8acb\u4f7f\u7528\u4e0d\u53ef\u8b8a\u5feb\u7167\uff08immutable snapshots\uff09<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e26\u975e\u6240\u6709\u4eba\u90fd\u9700\u8981 VM \u5c64\u3002\u5982\u679c\u60a8\u7684\u5bb9\u5668\u76f4\u63a5\u57f7\u884c\u5728\u4e3b\u6a5f\u4e0a\uff0c\u9632\u79a6 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u624b\u6bb5\u5c31\u662f\u4e0d\u53ef\u8b8a\u5feb\u7167\u3002\u8acb\u5728 Snapshot Replication \u4e2d\uff0c\u70ba\u5b58\u653e\u5bb9\u5668\u8cc7\u6599\u7684\u5171\u7528\u8cc7\u6599\u593e\u958b\u555f\u6b64\u529f\u80fd\u3002\u9019\u9700\u8981 DSM 7.2 \u6216\u66f4\u65b0\u7248\u672c\u4ee5\u53ca Btrfs \u5132\u5b58\u7a7a\u9593\uff0c\u4e14\u5728\u9396\u5b9a\u671f\u9593\u5167\uff0c\u5305\u62ec\u88ab\u653b\u64ca\u8005\u63a7\u5236\u7684\u7ba1\u7406\u54e1\u5e33\u865f\u5728\u5167\uff0c\u4efb\u4f55\u4eba\u90fd\u7121\u6cd5\u522a\u9664\u5b83\u5011\u3002\u6709\u5169\u500b\u7d30\u7bc0\u6703\u6c7a\u5b9a\u6210\u6557\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u4f7f\u7528\u7d81\u5b9a\u639b\u8f09\uff08bind mounts\uff09\u81f3\u5171\u7528\u8cc7\u6599\u593e<\/strong> \u4f8b\u5982 <code>\/volume1\/docker\/app<\/code>\u3002Docker \u5177\u540d\u5377\uff08named volumes\uff09\u4f4d\u65bc <code>\/volume1\/@docker<\/code>\uff0c\u9019\u4e26\u975e\u5171\u7528\u8cc7\u6599\u593e\uff0c\u5b8c\u5168\u7121\u6cd5\u9032\u884c\u5feb\u7167\u3002<\/li>\n\n\n\n<li><strong>\u5728\u5feb\u7167\u4e4b\u524d\u5c07\u8cc7\u6599\u5eab\u50be\u5370\uff08dump\uff09\u81f3\u6a94\u6848\u3002<\/strong> \u57f7\u884c\u4e2d MariaDB \u7684\u5feb\u7167\u5c31\u5982\u540c\u65b7\u96fb\u6642\u7684\u526f\u672c\u3002\u9810\u5b9a\u7684 <code>mysqldump<\/code> \u532f\u51fa\u81f3\u540c\u4e00\u500b\u5171\u7528\u8cc7\u6599\u593e\uff0c\u5c31\u80fd\u70ba\u60a8\u63d0\u4f9b\u4e00\u500b\u4e7e\u6de8\u7684\u9084\u539f\u9ede\uff0c\u4e26\u7531\u5feb\u7167\u5c07\u5176\u9396\u5b9a\u3002<\/li>\n\n\n\n<li><strong>\u9078\u64c7\u6bd4\u653b\u64ca\u8005\u6f5b\u4f0f\u6642\u9593\u66f4\u9577\u7684\u9396\u5b9a\u671f\u9593\u3002<\/strong> \u4e0a\u8ff0\u53d7\u5bb3\u8005\u5728\u6a94\u6848\u88ab\u52a0\u5bc6\u524d\uff0c\u5f8c\u9580\u7a0b\u5f0f\u5df2\u5b58\u5728\u4e86 37 \u5929\u3002\u4e03\u5929\u7684\u4e0d\u53ef\u8b8a\u5feb\u7167\u5c07\u7121\u6cd5\u8ffd\u6eaf\u56de\u4e7e\u6de8\u7684\u72c0\u614b\u3002<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"526\" height=\"318\" sizes=\"auto, (max-width: 526px) 100vw, 526px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/immutable-snapshot-c3rb3r-ransomware.webp\" alt=\"\u5df2\u555f\u7528\u4e0d\u53ef\u8b8a\u5feb\u7167\u7684 Snapshot Replication \u8a2d\u5b9a\uff0c\u4ee5\u4fdd\u8b77\u5171\u7528\u8cc7\u6599\u593e\u514d\u53d7 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u4fb5\u5bb3\" class=\"wp-image-22239\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/immutable-snapshot-c3rb3r-ransomware.webp 526w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/immutable-snapshot-c3rb3r-ransomware-300x181.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/immutable-snapshot-c3rb3r-ransomware-18x12.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/immutable-snapshot-c3rb3r-ransomware-400x242.webp 400w\" \/><figcaption class=\"wp-element-caption\">Snapshot Replication\uff0c\u5171\u7528\u8cc7\u6599\u593e\u8a2d\u5b9a\uff1a\u6bcf\u65e5\u6392\u7a0b\u4e26\u5c07\u4e0d\u53ef\u8b8a\u5feb\u7167\u9396\u5b9a 30 \u5929\u3002<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u6211\u5011\u7684\u984d\u5916\u9632\u79a6\u5c64\uff1aActive Insight \u5728\u52a0\u5bc6\u958b\u59cb\u6642\u81ea\u52d5\u62cd\u651d\u5feb\u7167<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u662f\u5927\u591a\u6578\u6307\u5357\u5ffd\u8996\u7684\u9632\u79a6\u5c64\u3002Active Insight \u662f Synology \u7684\u96f2\u7aef\u76e3\u63a7\u670d\u52d9\uff0c\u53ef\u4ee5\u76e3\u63a7\u5171\u7528\u8cc7\u6599\u593e\u4e2d\u7684\u6a94\u6848\u6d3b\u52d5\uff0c\u4e00\u65e6\u5224\u65b7\u70ba\u52d2\u7d22\u8edf\u9ad4\u884c\u70ba\uff0c\u5c31\u6703\u81ea\u52d5\u505a\u51fa\u8655\u7f6e\u3002Synology \u5728\u5176 <a href=\"https:\/\/kb.synology.com\/en-global\/DSM\/tutorial\/How_to_add_extra_security_to_your_Synology_NAS\" target=\"_blank\" rel=\"noreferrer noopener\">NAS \u5b89\u5168\u6307\u5357<\/a>\u4e2d\u8aaa\u660e\uff1a\u7576\u5075\u6e2c\u5230\u52d2\u7d22\u8edf\u9ad4\u4e8b\u4ef6\u6642\uff0cActive Insight \u6703\u767c\u9001\u4e8b\u4ef6\u901a\u77e5\u4e26\u81ea\u52d5\u62cd\u651d\u5171\u7528\u8cc7\u6599\u593e\u7684\u5feb\u7167\uff1b\u5728\u652f\u63f4\u7684\u6a5f\u7a2e\u4e0a\uff0c\u8a72\u5feb\u7167\u70ba\u4e0d\u53ef\u8b8a\u5feb\u7167\uff08Immutable Snapshot\uff09\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u5c0d C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7279\u5225\u91cd\u8981\u7684\u539f\u56e0\u5728\u65bc\uff1aC3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u52a0\u5bc6\u901f\u5ea6\u8f03\u6162\u3002\u64c1\u6709\u8d85\u904e 50 TB \u8cc7\u6599\u7684\u53d7\u5bb3\u8005\u5728\u6ce8\u610f\u5230\u6642\uff0c\u52a0\u5bc6\u7a0b\u5e8f\u624d\u525b\u9032\u884c\u5230\u4ed6 2024 \u5e74\u7684\u7167\u7247\u3002\u5728\u9996\u6b21\u51fa\u73fe\u52a0\u5bc6\u8de1\u8c61\u6642\u62cd\u651d\u7684\u5feb\u7167\uff0c\u53ef\u4ee5\u51cd\u7d50\u6240\u6709\u5c1a\u672a\u88ab\u7ac4\u6539\u7684\u6a94\u6848\uff0c\u9019\u901a\u5e38\u6db5\u84cb\u4e86\u5132\u5b58\u7a7a\u9593\u7684\u5927\u90e8\u5206\u5167\u5bb9\u3002\u6b64\u5916\uff0c\u5b83\u4e5f\u4e0d\u95dc\u5fc3 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u662f\u5982\u4f55\u5165\u4fb5\u7684\uff0c\u56e0\u70ba\u5b83\u76e3\u63a7\u7684\u662f\u6a94\u6848\u6d3b\u52d5\uff0c\u800c\u975e\u767b\u5165\u9801\u9762\u3002\u5728\u6211\u5011\u7684 DS1621xs+ \u4e0a\uff0c\u6a94\u6848\u6d3b\u52d5\u9801\u9762\u5c07\u52d2\u7d22\u8edf\u9ad4\u9632\u8b77\u986f\u793a\u70ba Protected\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"644\" height=\"596\" sizes=\"auto, (max-width: 644px) 100vw, 644px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/active-insight-ransomware-protection-c3rb3r-ransomware.webp\" alt=\"Active Insight \u6a94\u6848\u6d3b\u52d5\u9801\u9762\u986f\u793a DS1621xs+ \u4e0a\u7684\u52d2\u7d22\u8edf\u9ad4\u9632\u8b77\u72c0\u614b\u70ba\u5df2\u4fdd\u8b77\uff0c\u9019\u662f\u62b5\u79a6 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u5b89\u5168\u9632\u8b77\u7db2\" class=\"wp-image-22272\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/active-insight-ransomware-protection-c3rb3r-ransomware.webp 644w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/active-insight-ransomware-protection-c3rb3r-ransomware-300x278.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/active-insight-ransomware-protection-c3rb3r-ransomware-13x12.webp 13w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/active-insight-ransomware-protection-c3rb3r-ransomware-600x555.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/active-insight-ransomware-protection-c3rb3r-ransomware-400x370.webp 400w\" \/><figcaption class=\"wp-element-caption\">\u6211\u5011 DS1621xs+ \u4e0a\u7684 Active Insight \u6a94\u6848\u6d3b\u52d5\uff1a\u52d2\u7d22\u8edf\u9ad4\u9632\u8b77\u5df2\u958b\u555f\uff0c\u56e0\u6b64\u5075\u6e2c\u5230 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u4e8b\u4ef6\u6642\u6703\u89f8\u767c\u81ea\u52d5\u5feb\u7167\u3002<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u4f9d\u8cf4\u6b64\u529f\u80fd\u4e4b\u524d\uff0c\u8acb\u5148\u77ad\u89e3\u5176\u9650\u5236\u3002\u9019\u4e9b\u5167\u5bb9\u4f86\u81ea Synology \u7684 <a href=\"https:\/\/kb.synology.com\/en-global\/DSM\/tutorial\/Active_Insight_File_Activity\" target=\"_blank\" rel=\"noreferrer noopener\">\u6a94\u6848\u6d3b\u52d5\u8aaa\u660e\u6587\u4ef6<\/a>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u6a94\u6848\u6d3b\u52d5\u76e3\u63a7\u9810\u8a2d\u70ba\u95dc\u9589\u3002<\/strong> \u8acb\u5728\u63a7\u5236\u53f0\u5c07 NAS \u8a3b\u518a\u81f3 Active Insight\uff0c\u7136\u5f8c\u5728 Active Insight \u5165\u53e3\u7db2\u7ad9\u4e2d\u70ba\u6bcf\u53f0\u4e3b\u6a5f\u555f\u7528\u76e3\u63a7\u3002<\/li>\n\n\n\n<li><strong>\u5b83\u9700\u8981 Snapshot Replication\u3001<\/strong> DSM 7.2 \u6216\u66f4\u65b0\u7248\u672c\u3001Active Insight 3.0.2 \u6216\u66f4\u65b0\u7248\u672c\u3001\u81f3\u5c11 1 GB \u8a18\u61b6\u9ad4\uff0c\u4ee5\u53ca\u6307\u6d3e\u7d66\u8a72 NAS \u7684 Active Insight \u6388\u6b0a\u3002<\/li>\n\n\n\n<li><strong>\u6bcf\u500b\u5171\u7528\u8cc7\u6599\u593e\u6bcf\u5929\u6700\u591a\u81ea\u52d5\u62cd\u651d\u4e00\u5f35\u5feb\u7167\u3002<\/strong> \u9019\u662f\u5075\u6e2c\u5f8c\u63a1\u53d6\u7684\u5b89\u5168\u9632\u8b77\u7db2\uff0c\u4e0d\u80fd\u66ff\u4ee3\u6392\u7a0b\u7684\u4e0d\u53ef\u8b8a\u5feb\u7167\u3002<\/li>\n\n\n\n<li><strong>\u4e0d\u6db5\u84cb\u7684\u7bc4\u570d\uff1a<\/strong> Surveillance Station \u9304\u5f71\u8cc7\u6599\u593e\u8207\u5916\u63a5 USB \u786c\u789f\u4e0a\u7684\u5171\u7528\u8cc7\u6599\u593e\u3002<\/li>\n\n\n\n<li><strong>\u4e0d\u53ef\u8b8a\u6027\u53d6\u6c7a\u65bc\u6a5f\u7a2e\u3002<\/strong> \u5728\u4e0d\u652f\u63f4\u4e0d\u53ef\u8b8a\u5feb\u7167\u7684\u6a5f\u7a2e\u4e0a\uff0c\u64c1\u6709 root \u6b0a\u9650\u7684\u653b\u64ca\u8005\u4ecd\u53ef\u522a\u9664\u81ea\u52d5\u5feb\u7167\uff0c\u56e0\u6b64\u8acb\u914d\u5408\u4e0a\u8ff0\u4e0d\u53ef\u8b8a\u5feb\u7167\u6392\u7a0b\u4f7f\u7528\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u4e5f\u60f3\u63a1\u7528\u76f8\u540c\u7684\u8a2d\u5b9a\u55ce\uff1f<\/strong> SynoPower Club \u92b7\u552e\u9019\u5169\u500b\u6838\u5fc3\u5143\u4ef6\u7684\u6b63\u7248\u6388\u6b0a\uff1a\u4e00\u500b <a href=\"https:\/\/synopower.club\/zh\/vdsm%e5%8c%85\/\">Virtual DSM (VDSM) \u6388\u6b0a<\/a> \u53ef\u5728\u9694\u96e2\u7684\u5ba2\u9ad4\u6a5f\u4e2d\u57f7\u884c\u60a8\u7684 Docker \u670d\u52d9\uff0c\u4ee5\u53ca\u4e00\u500b <a href=\"https:\/\/synopower.club\/zh\/synology-vmm-pro-license\/\">VMM Pro\u6388\u6b0a<\/a> \u53ef\u7528\u65bc\u4fdd\u8b77\u8a08\u756b\u3001\u8de8 NAS \u8907\u88fd\u8207\u5373\u6642\u8f49\u79fb\u3002\u91d1\u9470\u900f\u904e\u96fb\u5b50\u90f5\u4ef6\u5bc4\u9001\u3002<\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-a221f4eb wp-block-buttons-is-layout-flex\" style=\"border-style:none;border-width:0px;border-radius:0px;margin-top:var(--wp--preset--spacing--50);margin-bottom:var(--wp--preset--spacing--50);padding-top:var(--wp--preset--spacing--40);padding-right:0;padding-bottom:var(--wp--preset--spacing--40);padding-left:0\">\n<div class=\"wp-block-button is-style-fill\"><a class=\"wp-block-button__link has-palette-color-4-color has-luminous-vivid-amber-background-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/synopower.club\/zh\/vdsm%e5%8c%85\/\" style=\"border-radius:15px\" target=\"_blank\" rel=\"noreferrer noopener\">\u53d6\u5f97 Virtual DSM \u6388\u6b0a<\/a><\/div>\n\n\n\n<div class=\"wp-block-button is-style-fill\"><a class=\"wp-block-button__link has-palette-color-4-color has-luminous-vivid-amber-background-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/synopower.club\/zh\/synology-vmm-pro-license\/\" style=\"border-radius:15px\" target=\"_blank\" rel=\"noreferrer noopener\">\u53d6\u5f97 VMM Pro \u6388\u6b0a<\/a><\/div>\n<\/div>\n\n\n\n<h2 id=\"where-to-find-more-official-resources\" class=\"wp-block-heading\">\u54ea\u88e1\u53ef\u4ee5\u627e\u5230\u66f4\u591a\u5b98\u65b9\u8cc7\u6e90<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u64b0\u5beb\u672c\u6587\u6642\uff0cSynology \u4e0a\u7684 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u624d\u516c\u958b\u7206\u767c\u5169\u5929\uff0c\u76ee\u524d\u5c1a\u7121\u5b98\u65b9\u5f71\u7247\u5831\u5c0e\uff0c\u56e0\u6b64\u672c\u7bc0\u5217\u51fa\u7b2c\u4e00\u624b\u8cc7\u6599\u4f86\u6e90\u800c\u975e\u64cd\u4f5c\u6307\u5357\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.synology.com\/en-global\/company\/news\/article\/C3RB3R\" target=\"_blank\" rel=\"noreferrer noopener\">Synology \u5b89\u5168\u6027\u516c\u544a<\/a> \u767c\u5e03\u65bc 2026 \u5e74 10 \u6708 29 \u65e5\uff0c\u63d0\u9192\u820a\u7248 DSM \u4f7f\u7528\u8005\u7acb\u5373\u66f4\u65b0\u4e26\u958b\u555f\u81ea\u52d5\u66f4\u65b0\uff1b\u96a8\u5f8c\u65bc 10 \u6708 30 \u65e5\u5411\u5ba2\u6236\u767c\u9001\u96fb\u5b50\u90f5\u4ef6\uff0c\u78ba\u8a8d SA-24:20 \u70ba\u552f\u4e00\u6d89\u53ca\u7684\u6f0f\u6d1e\u3002<\/li>\n\n\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_24_20\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-24:20<\/a> \u548c <a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_26_13\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-26:13<\/a> \u70ba\u7248\u672c\u5c0d\u7167\u8868\u3002\u8acb\u5728\u63a7\u5236\u53f0\u7684\u300c\u66f4\u65b0\u8207\u9084\u539f\u300d\u4e2d\u6aa2\u67e5\u60a8\u7684\u7d44\u5efa\u7248\u672c\uff0c\u4e26\u8207\u5169\u8005\u9032\u884c\u6bd4\u5c0d\u3002<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/lllong1377\/c3rb3r-never-rebooted-still-no-key\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u904b\u884c GitLab \u7684 Proxmox VE \u865b\u64ec\u6a5f\u4e2d\u7684 DSM<\/a> \u662f\u6240\u6709\u5df2\u77e5\u6848\u4f8b\u6700\u4f73\u7684\u7d22\u5f15\uff08\u5305\u542b\u6b64\u8655\u672a\u63d0\u53ca\u7684\u6848\u4f8b\uff09\uff0c\u4e5f\u662f\u5c0d\u8a18\u61b6\u9ad4\u53d6\u8b49\u4f55\u6642\u5931\u53bb\u4f5c\u7528\u89e3\u91cb\u5f97\u6700\u6e05\u695a\u7684\u6587\u7ae0\u3002<\/li>\n\n\n\n<li>\u4e0a\u8ff0\u9023\u7d50\u7684\u4e09\u500b r\/synology \u8a0e\u8ad6\u4e32\uff0c\u7279\u5225\u662f\u6578\u4f4d\u53d6\u8b49\u5206\u6790\u6587\u7ae0\uff0c\u5176\u4e2d\u5305\u542b\u6309\u90e8\u5c31\u73ed\u7684\u552f\u8b80\u78c1\u789f\u8abf\u67e5\u6307\u4ee4\uff1a <a href=\"https:\/\/www.reddit.com\/r\/synology\/comments\/1xhqgov\/well_it_finally_happened_my_first_real_ransomware\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u597d\u5427\uff0c\u5b83\u7d42\u65bc\u767c\u751f\u4e86<\/a>.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Synology \u5b98\u65b9\u6aa2\u67e5\u6e05\u55ae\uff082026 \u5e74 10 \u6708 30 \u65e5\uff09<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Synology \u5bc4\u7d66\u5ba2\u6236\u7684\u96fb\u5b50\u90f5\u4ef6\u4ee5\u56db\u500b\u6b65\u9a5f\u4f5c\u7d50\u3002\u9019\u4e9b\u6b65\u9a5f\u7c21\u77ed\uff0c\u800c\u4e14\u6bcf\u4e00\u500b\u6b65\u9a5f\u5c0d\u65bc\u9632\u79a6 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u90fd\u81f3\u95dc\u91cd\u8981\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u6aa2\u67e5\u662f\u5426\u6709\u5165\u4fb5\u8005\u3002<\/strong> C3RB3R \u52d2\u7d22\u8edf\u9ad4\u6703\u7559\u4e0b\u6392\u7a0b\u7684\u6301\u4e45\u6027\u9632\u7dda\uff0c\u56e0\u6b64\u8acb\u57f7\u884c Security Advisor \u6383\u63cf\uff0c\u63a5\u8457\u5728\u300c\u4efb\u52d9\u6392\u7a0b\u8868\u300d\u4e2d\u5c0b\u627e\u975e\u60a8\u5efa\u7acb\u7684\u6307\u4ee4\u78bc\uff0c\u4e26\u5728\u300c\u4f7f\u7528\u8005\u8207\u7fa4\u7d44\u300d\u4e2d\u5c0b\u627e\u975e\u60a8\u65b0\u589e\u7684\u7ba1\u7406\u54e1\u5e33\u865f\u3002\u82e5\u767c\u73fe\u4efb\u4f55\u7570\u5e38\uff0c\u8acb\u806f\u7d61 Synology Support\u3002<\/li>\n\n\n\n<li><strong>\u66f4\u65b0\u6240\u6709\u9805\u76ee\u3002<\/strong> \u524d\u5f80\u300c\u63a7\u5236\u53f0\u300d&gt;\u300c\u66f4\u65b0 &amp; \u9084\u539f\u300d\u5b89\u88dd\u6700\u65b0\u7684 DSM\uff0c\u7136\u5f8c\u66f4\u65b0\u300c\u5957\u4ef6\u4e2d\u5fc3\u300d\u4e2d\u7684\u6bcf\u4e00\u500b\u5957\u4ef6\u3002<\/li>\n\n\n\n<li><strong>\u958b\u555f\u81ea\u52d5\u66f4\u65b0<\/strong> \u5728\u300c\u66f4\u65b0 &amp; \u9084\u539f\u300d\u4e2d\uff0c\u4ee5\u4fbf\u672a\u4f86\u7684\u5b89\u5168\u6027\u4fee\u5fa9\u7a0b\u5f0f\u4e00\u91cb\u51fa\u5c31\u80fd\u7acb\u5373\u5957\u7528\u3002<\/li>\n\n\n\n<li><strong>\u4fdd\u6301\u7570\u5730\u5099\u4efd\u3002<\/strong> \u4f7f\u7528 Hyper Backup \u548c Snapshot Replication \u5c07\u526f\u672c\u5b58\u653e\u5728\u7368\u7acb\u7684\u4f4d\u7f6e\uff0c\u4e26\u5b9a\u671f\u6aa2\u67e5\u5099\u4efd\u4efb\u52d9\u662f\u5426\u78ba\u5be6\u5b8c\u6210\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e00\u6b65\u662f\u5927\u5bb6\u6700\u5e38\u5ffd\u7565\u7684\u6b65\u9a5f\u3002\u5982\u679c\u60a8\u7684\u88dd\u7f6e\u5728 2024 \u5e74 12 \u6708\u4fee\u5fa9\u7a0b\u5f0f\u91cb\u51fa\u524d\u53ef\u5f9e\u7db2\u969b\u7db2\u8def\u5b58\u53d6\uff0cC3RB3R \u52d2\u7d22\u8edf\u9ad4\u53ef\u80fd\u5df2\u7d93\u7acb\u8db3\uff0c\u800c\u4eca\u5929\u9032\u884c\u66f4\u65b0\u4e26\u7121\u6cd5\u544a\u77e5\u60a8\u662f\u5426\u6709\u4eba\u5df2\u7d93\u6f5b\u5165\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u70ba\u60a8\u81ea\u52d5\u57f7\u884c\u6aa2\u67e5\u7684\u514d\u8cbb\u5de5\u5177<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u60a8\u719f\u6089\u7d42\u7aef\u6a5f\uff0c\u7b2c\u4e00\u6b65\u73fe\u5728\u53ea\u9700\u57f7\u884c\u55ae\u4e00\u6307\u4ee4\u3002synology-nas-cli \u662f\u7368\u7acb\u958b\u767c\u8005 Akari Sora \u65bc 2026 \u5e74 10 \u6708 30 \u65e5\u767c\u5e03\u7684 MIT \u6388\u6b0a\u958b\u6e90\u547d\u4ee4\u5217\u5de5\u5177\u3002\u5b83\u900f\u904e Web API \u767b\u5165 DSM\uff0c\u4e26\u91dd\u5c0d\u672c\u6b21\u653b\u64ca\u6d3b\u52d5\u7a3d\u6838 NAS\u3002\u8a72\u5c08\u6848\u5df2\u8a17\u7ba1\u65bc GitHub\uff1a <a href=\"https:\/\/github.com\/akari-sora\/synology-nas-cli\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">akari-sora\/synology-nas-cli<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5011\u5728\u9644\u4e0a\u9023\u7d50\u524d\u5df2\u8a73\u7d30\u5be9\u95b1\u5176\u7a0b\u5f0f\u78bc\u3002\u5b83\u50c5\u4f7f\u7528 Python \u6a19\u6e96\u51fd\u5f0f\u5eab\uff0c\u4e26\u4e14\u9664\u4e86\u60a8\u7684 NAS\u3001Synology \u4e0b\u8f09\u4f3a\u670d\u5668\u3001PyPI \u8207 soimy \u6551\u63f4\u5de5\u5177\u5305\u4e4b\u5916\uff0c\u4e0d\u6703\u8207\u4efb\u4f55\u5916\u90e8\u4f3a\u670d\u5668\u9023\u7dda\u3002\u5b83\u4e0d\u6703\u50b3\u9001\u4efb\u4f55\u9059\u6e2c\u8cc7\u6599\uff0c\u57fa\u790e\u7a3d\u6838\u4e5f\u50c5\u9032\u884c\u552f\u8b80\u6aa2\u67e5\u3002\u4ee5\u4e0b\u662f\u5b83\u7684\u6aa2\u67e5\u9805\u76ee\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u4fee\u88dc\u7a0b\u5f0f\u7248\u672c\u3002<\/strong> \u6bd4\u5c0d\u60a8\u7684 DSM \u5efa\u7f6e\u7248\u672c\u662f\u5426\u7b26\u5408 Synology-SA-26:13\uff08\u6b64\u4fee\u88dc\u4ea6\u6db5\u84cb\u8f03\u820a\u7684 SA-24:20 \u4fee\u5fa9\uff09\uff0c\u4ee5\u53ca\u5df2\u5b89\u88dd\u7684\u5957\u4ef6\u662f\u5426\u7b26\u5408 SA-26:14\u3002<\/li>\n\n\n\n<li><strong>\u66b4\u9732\u98a8\u96aa\u3002<\/strong> QuickConnect\u3001\u8def\u7531\u5668\u4e0a\u7684 UPnP \u901a\u8a0a\u57e0\u8f49\u767c\u3001DSM \u9632\u706b\u7246\u3001\u81ea\u52d5\u5c01\u9396\u3001SMB1 \u4ee5\u53ca\u5167\u5efa\u7684 admin \u5e33\u865f\u3002<\/li>\n\n\n\n<li><strong>C3RB3R \u52d2\u7d22\u8edf\u9ad4\u7684\u75d5\u8de1\u3002<\/strong> \u9023\u7dda\u7d00\u9304\u4e2d\u6ce8\u5165\u7684\u767b\u5165\u5b57\u4e32\u3001 <code>\/etc\/cron.d\/synot*<\/code> \u9805\u76ee\u3001 <code>libgld<\/code> \u548c <code>qnetd<\/code> \u57f7\u884c\u6a94\u3001\u984d\u5916\u7684 root \u5e33\u865f\u3001SSH \u91d1\u9470\u4ee5\u53ca\u5171\u4eab\u8cc7\u6599\u593e\u4e2d\u7684\u52d2\u7d22\u4fe1\u3002<\/li>\n\n\n\n<li><strong>\u5feb\u7167\u3002<\/strong> \u6c92\u6709\u6709\u6548\u5feb\u7167\u6392\u7a0b\u7684\u5171\u7528\u8cc7\u6599\u593e\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b83\u9084\u80fd\u4fee\u5fa9\u767c\u73fe\u7684\u5927\u90e8\u5206\u554f\u984c\u3002\u5982\u679c\u6a94\u6848\u76ee\u524d\u6b63\u5728\u88ab\u52a0\u5bc6\uff0c\u5176 contain \u6307\u4ee4\u6703\u4f7f\u7528 SIGSTOP \u51cd\u7d50\u52a0\u5bc6\u7a0b\u5f0f\uff0c\u9019\u8207\u6211\u5011\u61c9\u8b8a\u8655\u7f6e\u6e05\u55ae\u7684\u7b2c\u4e8c\u6b65\u76f8\u540c\u3002\u63a5\u8457\u5b83\u7684 rescue \u6307\u4ee4\u6703\u9a45\u52d5 soimy \u5de5\u5177\u5305\u64f7\u53d6\u8a18\u61b6\u9ad4\u4e26\u641c\u5c0b\u91d1\u9470\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nas incident                 # \u552f\u8b80\u7a3d\u6838<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">nas incident --deep          # \u540c\u6642\u641c\u5c0b\u690d\u5165\u7269\uff08\u55ae\u4e00\u552f\u8b80 root \u8173\u672c\uff09<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>nas incident fix --dry-run   # \u5217\u51fa\u9810\u8a08\u9032\u884c\u7684\u6240\u6709\u8b8a\u66f4\uff0c\u4f46\u5b8c\u5168\u4e0d\u4fee\u6539\u7cfb\u7d71<\/strong> \u5728\u8b93\u5b83\u9032\u884c\u4efb\u4f55\u8b8a\u66f4\u524d\uff0c\u8acb\u5148\u95b1\u8b80\u4ee5\u4e0b\u6ce8\u610f\u4e8b\u9805\uff1a<\/li>\n\n\n\n<li><strong>\u9019\u662f\u4e00\u500b\u5168\u65b0\u7684\u5de5\u5177\u3002<\/strong> \u6b64\u5c08\u6848\u50c5\u767c\u5e03\u5e7e\u5929\uff0c\u7531\u55ae\u4e00\u958b\u767c\u8005\u7dad\u8b77\uff0c\u672a\u96b8\u5c6c\u65bc Synology\uff0c\u4e14\u5f88\u5c11\u7d93\u904e\u5916\u90e8\u5be9\u67e5\u3002\u8acb\u5148\u5f9e\u552f\u8b80\u7a3d\u6838\u8207\u6a21\u64ec\u57f7\u884c (dry run) \u958b\u59cb\u3002<\/li>\n\n\n\n<li><strong>\u9632\u706b\u7246\u4fee\u5fa9\u53ef\u80fd\u6703\u5c07\u60a8\u9396\u5728\u7cfb\u7d71\u5916\u3002<\/strong> \u5b83\u6703\u5c07 DSM \u9632\u706b\u7246\u5207\u63db\u70ba\u62d2\u7d55\u9664\u4e86\u60a8\u6307\u5b9a\u7db2\u8def\u4ee5\u5916\u7684\u6240\u6709\u9023\u7dda\u3002\u8acb\u5f9e\u540c\u4e00\u5340\u57df\u7db2\u8def (LAN) \u4e0a\u7684\u96fb\u8166\u57f7\u884c\u5b83\uff0c\u4e26\u6e05\u695a RESET \u6309\u9215\u7684\u4f4d\u7f6e\u3002<\/li>\n\n\n\n<li><strong>\u5b83\u6703\u95dc\u9589 QuickConnect\u3002<\/strong> \u9019\u662f\u66f4\u5b89\u5168\u7684\u8a2d\u5b9a\uff0c\u4f46\u5982\u679c\u60a8\u7684\u5bb6\u4eba\u9700\u8981\u900f\u904e QuickConnect \u5b58\u53d6 Synology Photos \u6216 Surveillance Station\uff0c\u8acb\u5148\u8a2d\u5b9a\u597d VPN \u6216 Tailscale\u3002<\/li>\n\n\n\n<li><strong>\u6df1\u5ea6\u6383\u63cf (deep)\u3001\u9694\u96e2 (contain) \u8207\u6551\u63f4 (rescue) \u6307\u4ee4\u6703\u4ee5 root \u6b0a\u9650\u57f7\u884c\u3002<\/strong> \u5b83\u5011\u662f\u900f\u904e\u81e8\u6642\u5efa\u7acb\u7684\u300c\u5de5\u4f5c\u6392\u7a0b\u5668\u300d\u4efb\u52d9\u4f86\u904b\u4f5c\uff0c\u56e0\u70ba\u9019\u662f\u8b80\u53d6\u50c5\u9650 root \u6b0a\u9650\u65e5\u8a8c\u8207\u51cd\u7d50\u8655\u7406\u7a0b\u5e8f\u7684\u552f\u4e00\u65b9\u6cd5\u3002<\/li>\n\n\n\n<li><strong>README \u5efa\u8b70\u53ef\u5c07\u5176\u4ea4\u7531 AI Agent \u57f7\u884c\u3002<\/strong> \u5982\u679c\u60a8\u9019\u6a23\u505a\uff0c\u8acb\u5c07\u5bc6\u78bc\u59a5\u5584\u5132\u5b58\u5728\u5bc6\u78bc\u7ba1\u7406\u5668\u4e2d\uff0c\u800c\u975e\u8cbc\u5728\u804a\u5929\u8996\u7a97\u5167\uff0c\u4e26\u89aa\u81ea\u78ba\u8a8d\u4fee\u5fa9\u7d50\u679c\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u95dc\u65bc\u5176\u4ed6\u7cfb\u7d71\u5f37\u5316\u7684\u5b8c\u6574\u7d30\u7bc0\uff0c\u8acb\u53c3\u95b1\u6211\u5011\u95dc\u65bc <a href=\"https:\/\/synopower.club\/zh\/%e6%96%87%e4%bb%b6\/synology-nas-security-public-website\/\">\u5728 Synology NAS \u4e0a\u904b\u4f5c\u516c\u958b\u7db2\u7ad9<\/a> \u4ee5\u53ca\u95dc\u65bc <a href=\"https:\/\/synopower.club\/zh\/%e6%96%87%e4%bb%b6\/synology-threat-prevention-blind-spots\/\">Threat Prevention \u80fd\u770b\u5230\u8207\u770b\u4e0d\u5230\u7684\u5167\u5bb9<\/a> \u7684\u6307\u5357\uff08\u6db5\u84cb\u7db2\u8def\u5c64\u9762\uff09\uff0c\u800c <a href=\"https:\/\/synopower.club\/zh\/synology-php2shell-emergency-patch\/\">PHP2Shell \u4fee\u88dc\u6307\u5357<\/a> \u5247\u6db5\u84cb\u4e86\u540c\u4e00\u9031\u767c\u751f\u7684\u53e6\u4e00\u500b\u91cd\u5927\u5b89\u5168\u6027\u554f\u984c\u3002<\/p>\n\n\n\n<h2 id=\"c3rb3r-ransomware-limits-and-security-notes\" class=\"wp-block-heading\">C3RB3R \u52d2\u7d22\u8edf\u9ad4\u9650\u5236\u8207\u5b89\u5168\u6027\u6ce8\u610f\u4e8b\u9805<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u66f4\u65b0\u7cfb\u7d71\u4e26\u4e0d\u80fd\u6e05\u9664\u65e2\u6709\u7684\u52d2\u7d22\u8edf\u9ad4\u611f\u67d3\u3002<\/strong> \u81f3\u5c11\u6709\u4e00\u4f4d\u53d7\u5bb3\u8005\u5728\u5347\u7d1a\u5230\u6700\u65b0\u7248 DSM \u5f8c\uff0c\u767c\u73fe cron \u6392\u7a0b\u5e38\u99d0\u9805\u76ee\u4ecd\u7136\u5b58\u5728\u3002\u5982\u679c\u60a8\u5728\u672a\u4fee\u88dc\u6f0f\u6d1e\u524d\u66fe\u66b4\u9732\u65bc\u98a8\u96aa\u4e2d\uff0c\u8acb\u6aa2\u67e5 <code>\/etc\/cron.d<\/code>\u3001\u5de5\u4f5c\u6392\u7a0b\u5668\u3001\u958b\u6a5f\u555f\u52d5\u8173\u672c\u4ee5\u53ca\u5df2\u555f\u7528\u7684\u670d\u52d9\uff08\u5982 telnet\uff09\uff0c\u7136\u5f8c\u66f4\u63db\u6240\u6709\u6191\u8b49\u8207\u5bc6\u78bc\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u4fdd\u6301\u6700\u65b0\u4e0d\u7b49\u65bc\u7cfb\u7d71\u4e7e\u6de8\u3002<\/strong> \u4e00\u4f4d Reddit \u53d7\u5bb3\u8005\u4ee5\u70ba DSM \u5df2\u662f\u6700\u65b0\uff0c\u53e6\u4e00\u4f4d\u53d7\u5bb3\u8005\u5247\u662f\u5728\u958b\u555f 2FA \u4e14\u8a2d\u6709\u5f37\u5bc6\u78bc\u7684\u60c5\u6cc1\u4e0b\u906d\u5230\u5165\u4fb5\u3002\u5728\u5b8c\u6210\u4fee\u88dc\u524d\u906d\u5230\u5165\u4fb5\u7684\u88dd\u7f6e\uff0c\u5176\u690d\u5165\u7684\u60e1\u610f\u7a0b\u5f0f\u53ef\u80fd\u6703\u5728\u4e4b\u5f8c\u7684\u6bcf\u6b21\u66f4\u65b0\u4e2d\u7e7c\u7e8c\u5b58\u7559\u3002\u8acb\u5c07\u7db2\u969b\u7db2\u8def\u53ef\u5b58\u53d6\u7684\u4efb\u4f55 DSM \u767b\u5165\u9801\u9762\u90fd\u8996\u70ba\u653b\u64ca\u76ee\u6a19\uff0c\u5305\u62ec\u60a8\u5f9e\u672a\u7279\u610f\u8a2d\u5b9a\u3001\u7531 UPnP \u81ea\u52d5\u767c\u5e03\u7684\u9801\u9762\u3002\u8acb\u4f7f\u7528 VPN \u6216 Tailscale \u9032\u884c\u9060\u7aef\u5b58\u53d6\uff0c\u4e26\u95dc\u9589\u8def\u7531\u5668\u4e0a\u7684 UPnP\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>RAID \u548c\u672c\u6a5f\u5099\u4efd\u7121\u6cd5\u7528\u4f86\u62b5\u79a6 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u3002<\/strong> \u906d\u53d7\u5165\u4fb5\u7684 DSM \u6240\u80fd\u5beb\u5165\u7684\u4efb\u4f55\u5167\u5bb9\u90fd\u6703\u88ab\u52a0\u5bc6\uff0c\u5305\u62ec\u540c\u4e00\u53f0 NAS \u4e0a\u7684 Hyper Backup \u76ee\u7684\u5730\u4ee5\u53ca\u5df2\u639b\u8f09\u7684\u7db2\u8def\u5171\u7528\u8cc7\u6599\u593e\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u5728\u95b1\u8b80\u76f8\u95dc\u6848\u4f8b\u524d\u8acb\u52ff\u652f\u4ed8\u8d16\u91d1\u3002<\/strong> \u652f\u4ed8\u8d16\u91d1\u7d66 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u71df\u904b\u8005\u53ea\u6703\u8cc7\u52a9\u4e0b\u4e00\u6ce2\u653b\u64ca\uff0c\u4e14\u7121\u6cd5\u4fdd\u8b49\u80fd\u6551\u56de\u6a94\u6848\u3002\u5982\u679c\u52a0\u5bc6\u7a0b\u5f0f\u4ecd\u5728\u904b\u4f5c\uff0c\u63d0\u53d6\u8a18\u61b6\u9ad4\u89e3\u5bc6\u662f\u60a8\u7684\u6700\u4f73\u6a5f\u6703\uff1b\u5982\u679c\u7a0b\u5f0f\u5df2\u505c\u6b62\uff0c\u552f\u4e00\u5207\u5408\u5be6\u969b\u7684\u505a\u6cd5\u662f\u4f7f\u7528\u5132\u5b58\u5728 NAS \u5916\u90e8\u7684\u5099\u4efd\u526f\u672c\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u8cbc\u4e0a\u5167\u5bb9\u81f3 AI \u52a9\u624b\u6642\u8acb\u52d9\u5fc5\u8b39\u614e\u3002<\/strong> AI \u5de5\u5177\u5728\u6b64\u8655\u5354\u52a9\u4e86\u6578\u540d\u53d7\u5bb3\u8005\uff0c\u4f46\u8acb\u52ff\u63d0\u4f9b\u5bc6\u78bc\u3001\u5df2\u5fa9\u539f\u7684\u91d1\u9470\u3001\u5b8c\u6574\u8a18\u61b6\u9ad4\u50be\u5370\u6a94\u6216\u5546\u696d\u8cc7\u6599\u3002\u60a8\u53ef\u4ee5\u8b93 AI \u5efa\u8b70\u6307\u4ee4\uff0c\u4e26\u7531\u60a8\u89aa\u81ea\u57f7\u884c\u4efb\u4f55\u9700\u8981 root \u6b0a\u9650\u7684\u64cd\u4f5c\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u975e\u539f\u5ee0\u786c\u9ad4\u627f\u64d4\u984d\u5916\u98a8\u96aa\u3002<\/strong> \u6578\u500b\u5df2\u8a18\u9304\u7684\u53d7\u5bb3\u8005\u662f\u5728\u975e\u539f\u5ee0\u786c\u9ad4\u4e0a\u57f7\u884c DSM\uff0c\u9019\u985e\u8a2d\u5099\u901a\u5e38\u96e3\u4ee5\u6216\u7121\u6cd5\u5957\u7528\u5b98\u65b9\u66f4\u65b0\u3002\u5982\u679c\u60a8\u7684\u74b0\u5883\u5c6c\u65bc\u6b64\u985e\uff0c\u8acb\u5047\u8a2d\u7cfb\u7d71\u5c1a\u672a\u4fee\u88dc\u6f0f\u6d1e\uff0c\u4e26\u5c07\u5176\u5b8c\u5168\u5207\u65b7\u7db2\u969b\u7db2\u8def\u9023\u7dda\u3002<\/p>\n\n\n\n<h2 id=\"references\" class=\"wp-block-heading\">\u53c3\u8003<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.synology.com\/en-global\/company\/news\/article\/C3RB3R\" target=\"_blank\" rel=\"noreferrer noopener\">\u95dc\u65bc DSM \u52d2\u7d22\u8edf\u9ad4\u653b\u64ca\u7684 Synology \u5b89\u5168\u6027\u516c\u544a<\/a>\uff0c2026 \u5e74 10 \u6708 29 \u65e5\u3002<\/li>\n\n\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_24_20\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-24:20 DSM (Pwn2Own 2024)<\/a>\uff0cCVE-2024-10441 \u8207\u5df2\u4fee\u88dc\u7684 DSM \u7d44\u5efa\u7248\u672c\u3002<\/li>\n\n\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_26_13\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-26:13 DSM<\/a>\uff0cCVE-2026-13639 \u8207 CVE-2026-13684\uff0c\u767c\u5e03\u65bc 2026 \u5e74 9 \u6708 18 \u65e5\u3002<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/Benjamin-zlt\/c3rb3r-baremetal-rescue\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Benjamin-zlt C3RB3R \u52d2\u7d22\u8edf\u9ad4\u88f8\u6a5f\u6551\u63f4<\/a>\u3001\u6a94\u6848\u683c\u5f0f\u3001\u91d1\u9470\u7d50\u69cb\u8207 SIGSTOP \u5de5\u4f5c\u6d41\u7a0b\u3002<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/akari-sora\/synology-nas-cli\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u8a18\u61b6\u9ad4\u6551\u63f4\u50c5\u5728\u52a0\u5bc6\u7a0b\u5f0f\u4ecd\u5728\u57f7\u884c\u6642\u6709\u6548\u3002<\/a>\u9019\u8207 GitHub \u4e0a\u4e09\u500b\u6848\u4f8b\u7684\u9069\u7528\u898f\u5247\u76f8\u540c\u3002<\/li>\n\n\n\n<li><a href=\"https:\/\/www.it-connect.tech\/c3rb3r-ransomware-is-hitting-synology-nas-devices-how-to-protect-yours\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">IT-Connect \u91dd\u5c0d C3RB3R \u653b\u64ca\u884c\u52d5\u7684\u5831\u5c0e<\/a>\uff0c\u7e3d\u7d50\u4e86 360 \u7684\u6b78\u56e0\u5206\u6790\u8207\u6642\u9593\u8ef8\u3002<\/li>\n\n\n\n<li><a href=\"https:\/\/kb.synology.com\/en-global\/DSM\/tutorial\/How_to_add_extra_security_to_your_Synology_NAS\" target=\"_blank\" rel=\"noreferrer noopener\">Synology \u77e5\u8b58\u4e2d\u5fc3\uff1a\u63d0\u5347\u60a8\u7684 Synology NAS \u5b89\u5168\u6027<\/a>\uff0c\u5305\u542b Active Insight \u5728\u5075\u6e2c\u5230\u52d2\u7d22\u8edf\u9ad4\u6642\u5982\u4f55\u81ea\u52d5\u5c0d\u5171\u7528\u8cc7\u6599\u593e\u62cd\u651d\u5feb\u7167\u3002<\/li>\n<\/ul>\n\n\n\n<h2 id=\"frequently-asked-questions\" class=\"wp-block-heading\">\u7d93\u5e38\u554f\u7684\u554f\u984c<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list\">\n<div id=\"faq-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">\u4ec0\u9ebc\u662f C3RB3R \u52d2\u7d22\u8edf\u9ad4\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>C3RB3R \u52d2\u7d22\u8edf\u9ad4\u662f Cerber \u5bb6\u65cf\u7684 Linux \u8b8a\u7a2e\uff0c\u81ea 2026 \u5e74 10 \u6708\u5e95\u4ee5\u4f86\u4e00\u76f4\u653b\u64ca Synology NAS \u8a2d\u5099\u3002\u5b83\u6703\u5c07\u6a94\u6848\u91cd\u547d\u540d\u70ba .L0CK3D \u526f\u6a94\u540d\uff0c\u5728\u6bcf\u500b\u8cc7\u6599\u593e\u4e2d\u7559\u4e0b read-me3.txt \u52d2\u7d22\u8aaa\u660e\u6a94\uff0c\u4e26\u900f\u904e Tor \u9801\u9762\u7d22\u53d6\u6bd4\u7279\u5e63\u3002<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">C3RB3R \u52d2\u7d22\u8edf\u9ad4\u5982\u4f55\u5165\u4fb5 Synology NAS\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u900f\u904e\u66b4\u9732\u65bc\u7db2\u969b\u7db2\u8def\u7684 DSM\u3002Synology \u65bc 2026 \u5e74 10 \u6708 30 \u65e5\u78ba\u8a8d\u5176\u50c5\u5229\u7528 Synology-SA-24:20 \u4e2d\u7684 CVE-2024-10441\uff08\u5df2\u65bc 2024 \u5e74 12 \u6708\u4fee\u88dc\uff09\uff0c\u4e14\u8207 PHP2Shell \u7121\u95dc\u3002\u8acb\u66f4\u65b0 DSM\uff0c\u6aa2\u67e5\u975e\u60a8\u5efa\u7acb\u7684\u6307\u4ee4\u78bc\u8207\u7ba1\u7406\u54e1\u5e33\u865f\uff0c\u4e26\u505c\u6b62\u5c07 DSM \u76f4\u63a5\u66b4\u9732\u5916\u7db2\u3002<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">C3RB3R \u52d2\u7d22\u8edf\u9ad4\u52a0\u5bc6\u7684\u6a94\u6848\u53ef\u4ee5\u514d\u8cbb\u89e3\u5bc6\u55ce\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u53ea\u6709\u5728\u52a0\u5bc6\u7a0b\u5e8f\uff08encryptor process\uff09\u4ecd\u5728\u57f7\u884c\u6642\u624d\u6709\u53ef\u80fd\u3002\u8acb\u4f7f\u7528 SIGSTOP \u51cd\u7d50\u8a72\u7a0b\u5e8f\u4e26\u50be\u5370\u5176\u8a18\u61b6\u9ad4\uff0c\u56e0\u70ba\u968e\u6bb5\u91d1\u9470\uff08session key\uff09\u50c5\u5b58\u5728\u65bc\u8a72\u8655\u3002\u4e00\u65e6\u7a0b\u5e8f\u7d50\u675f\u6216 NAS \u91cd\u555f\uff0c\u5c31\u6c92\u6709\u4efb\u4f55\u516c\u958b\u5de5\u5177\u53ef\u4ee5\u9084\u539f\u91d1\u9470\u4e86\u3002<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-4\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">\u53d7\u611f\u67d3\u7684 NAS \u61c9\u8a72\u91cd\u555f\u6216\u95dc\u6a5f\u55ce\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u4e0d\u61c9\u8a72\u3002\u8acb\u6539\u70ba\u5207\u65b7\u7db2\u8def\u9023\u7dda\u3002\u91cd\u555f\u6216\u57f7\u884c kill -9 \u6703\u6467\u6bc0\u91d1\u9470\u552f\u4e00\u7684\u526f\u672c\u3002\u8acb\u5148\u51cd\u7d50\u7a0b\u5e8f\uff0c\u5c07\u5176\u8a18\u61b6\u9ad4\u5132\u5b58\u81f3\u53e6\u4e00\u500b\u78c1\u789f\uff0c\u7136\u5f8c\u624d\u9032\u884c\u6e05\u7406\u3002<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-5\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">\u66f4\u65b0 DSM \u53ef\u4ee5\u6e05\u9664 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u55ce\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u4e0d\u884c\u3002\u66f4\u65b0\u53ea\u80fd\u88dc\u4e0a\u6f0f\u6d1e\uff0c\u4f46\u7121\u6cd5\u79fb\u9664\u5df2\u7d93\u5b58\u5728\u7684\u60e1\u610f\u7a0b\u5f0f\u3002\u53d7\u5bb3\u8005\u767c\u73fe\u5373\u4f7f\u5347\u7d1a\uff0ccron \u5c45\u7559\uff08persistence\uff09\u4f9d\u7136\u5b58\u5728\u3002\u8acb\u6aa2\u67e5 cron.d \u76ee\u9304\u3001\u6392\u7a0b\u4efb\u52d9\u8207 telnet\uff0c\u4e26\u66f4\u63db\u6240\u6709\u5bc6\u78bc\u3002<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-6\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Synology \u5feb\u7167\u80fd\u62b5\u79a6 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u55ce\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u4e0d\u53ef\u8b8a\u5feb\u7167\uff08Immutable snapshots\uff09\u53ef\u4ee5\u505a\u5230\uff0c\u56e0\u70ba\u5728\u9396\u5b9a\u671f\u9593\u5167\u4efb\u4f55\u4eba\u90fd\u7121\u6cd5\u522a\u9664\u5b83\u5011\uff0c\u5373\u4f7f\u662f\u88ab\u52ab\u6301\u7684\u7ba1\u7406\u54e1\u5e33\u865f\u4e5f\u4e0d\u884c\u3002Active Insight \u5247\u63d0\u4f9b\u984d\u5916\u4fdd\u969c\uff0c\u5728\u5075\u6e2c\u5230\u52d2\u7d22\u8edf\u9ad4\u6642\u81ea\u52d5\u5c0d\u5171\u7528\u8cc7\u6599\u593e\u62cd\u651d\u5feb\u7167\uff0c\u6bcf\u500b\u8cc7\u6599\u593e\u6bcf\u5929\u6700\u591a\u4e00\u6b21\u3002<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-7\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">\u70ba\u4ec0\u9ebc\u8981\u5728 Virtual DSM \u4e2d\u57f7\u884c Docker\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u56e0\u70ba\u865b\u64ec\u6a5f\u5668\u5feb\u7167\u5132\u5b58\u5728\u5bbf\u4e3b\u6a5f\uff08host\uff09\u4e0a\uff0c\u4f4d\u65bc\u5ba2\u9ad4\u6a5f\uff08guest\uff09\u4e4b\u5916\u3002\u5165\u4fb5\u5ba2\u9ad4\u6a5f\u7684\u52d2\u7d22\u8edf\u9ad4\u7121\u6cd5\u770b\u5230\u6216\u522a\u9664\u5b83\u5011\uff0c\u56e0\u6b64\u5fa9\u539f\u53ea\u9700\u9032\u884c\u56de\u6efe\u3002VMM Pro \u66f4\u80fd\u5c07\u8907\u88fd\u5099\u4efd\u767c\u9001\u81f3\u7b2c\u4e8c\u53f0 NAS\u3002<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-8\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">\u652f\u4ed8\u8d16\u91d1\u662f\u500b\u597d\u4e3b\u610f\u55ce\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u6211\u5011\u4e0d\u5efa\u8b70\u9019\u9ebc\u505a\u3002\u652f\u4ed8\u8d16\u91d1\u4e26\u4e0d\u4fdd\u8b49\u80fd\u6210\u529f\u89e3\u5bc6\uff0c\u800c\u4e14\u6703\u70ba\u4e0b\u4e00\u6b21\u653b\u64ca\u63d0\u4f9b\u8cc7\u91d1\u3002\u8acb\u5148\u67e5\u95b1 GitHub \u4e0a\u7684\u6551\u63f4\u6848\u4f8b\uff0c\u7136\u5f8c\u5f9e\u611f\u67d3 NAS \u4e4b\u5916\u4fdd\u5b58\u7684\u526f\u672c\u9032\u884c\u9084\u539f\u3002<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><strong>\u8b93\u4e0b\u4e00\u6b21 C3RB3R \u52d2\u7d22\u8edf\u9ad4\u653b\u64ca\u53ea\u82b1\u8cbb\u60a8\u9084\u539f\u7684\u6642\u9593\uff0c\u800c\u4e0d\u662f\u8d16\u91d1\u3002<\/strong> \u5728 Virtual DSM \u5167\u57f7\u884c\u60a8\u7684 Docker \u670d\u52d9\uff0c\u4e26\u900f\u904e VMM Pro \u4fdd\u8b77\u8a08\u5283\u4fdd\u8b77\u6574\u500b\u5ba2\u9ad4\u6a5f\uff0c\u8907\u88fd\u5099\u4efd\u81f3\u7b2c\u4e8c\u53f0 NAS\u3002SynoPower Club \u92b7\u552e\u9019\u5169\u8005\u7684\u6b63\u7248\u6388\u6b0a\uff0c\u4e26\u900f\u904e\u96fb\u5b50\u90f5\u4ef6\u5bc4\u9001\u6388\u6b0a\u78bc\u3002<\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-a221f4eb wp-block-buttons-is-layout-flex\" style=\"border-style:none;border-width:0px;border-radius:0px;margin-top:var(--wp--preset--spacing--50);margin-bottom:var(--wp--preset--spacing--50);padding-top:var(--wp--preset--spacing--40);padding-right:0;padding-bottom:var(--wp--preset--spacing--40);padding-left:0\">\n<div class=\"wp-block-button is-style-fill\"><a class=\"wp-block-button__link has-palette-color-4-color has-luminous-vivid-amber-background-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/synopower.club\/zh\/vdsm%e5%8c%85\/\" style=\"border-radius:15px\" target=\"_blank\" rel=\"noreferrer noopener\">\u53d6\u5f97 Virtual DSM \u6388\u6b0a<\/a><\/div>\n\n\n\n<div class=\"wp-block-button is-style-fill\"><a class=\"wp-block-button__link has-palette-color-4-color has-luminous-vivid-amber-background-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/synopower.club\/zh\/synology-vmm-pro-license\/\" style=\"border-radius:15px\" target=\"_blank\" rel=\"noreferrer noopener\">\u53d6\u5f97 VMM Pro \u6388\u6b0a<\/a><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>C3RB3R ransomware started showing up on Synology NAS units around 28 October 2026, and within a day it was the only topic on r\/synology. Files come back renamed with a .L0CK3D extension (a zero, not the letter O), every folder gets a read-me3.txt ransom note, and a Tor portal asks for Bitcoin. The fastest and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":22235,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_xspeed_no_cache":false,"_xspeed_expiry_hours":0,"footnotes":""},"categories":[198],"tags":[],"class_list":["post-22234","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/posts\/22234","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/comments?post=22234"}],"version-history":[{"count":4,"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/posts\/22234\/revisions"}],"predecessor-version":[{"id":22304,"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/posts\/22234\/revisions\/22304"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/media\/22235"}],"wp:attachment":[{"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/media?parent=22234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/categories?post=22234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/synopower.club\/zh\/wp-json\/wp\/v2\/tags?post=22234"}],"curies":[{"name":"\u53ef\u6fd5\u6027\u7c89\u5291","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}