Diskstation Ransomware Gang Busted in EU Crackdown

Italian authorities, working with French and Romanian counterparts under the coordination of Europol, have dismantled the Diskstation ransomware gang that targeted Synology NAS devices used by businesses worldwide. The suspects encrypted data systems and demanded cryptocurrency ransoms, disrupting operations across sectors like graphic design and film production. The Diskstation ransomware gang busted in this coordinated effort had exploited Synology system vulnerabilities and used credential stuffing techniques to gain unauthorized access.

The investigation began after complaints from Lombardy-based companies. Italy’s Cybersecurity Operations Center in Milan used forensic analysis and reverse engineering to uncover the group’s attack methods. Blockchain tracking tools followed ransom payments to the perpetrators, reinforcing the case. Romanian authorities arrested several individuals in Bucharest, including the 44-year-old main suspect, now in pre-trial detention on charges of computer system intrusion and extortion. The international collaboration and dual investigative approach helped authorities map the group’s structure and shut down its operations.

Authorities Dismantled “Diskstation” Ransomware Attacking Synology NAS Devices Worldwide