Malware
Cerber
- First Reported
- Nov 5, 2021
- Latest Reported
- Nov 3, 2026
Reported Context (4)
- The development comes amid reports from customers that their Synology devices have been hit by C3RB3R ransomware, which has been observed locking users' files with a ".L0CK3D" extension. Synology Says Ransomware Actors Exploit Patched DSM Flaw to Target NAS Devices
- The Cerber ransomware (also known as C3RB3R and CerberImposter), now deployed in attacks targeting Synology NAS devices, borrowed its name from a notorious Ransomware-as-a-Service (RaaS) with the same name that emerged Synology Warns of Ongoing C3RB3R Ransomware Attacks on NAS Devices
- HomeBlogConfluence to Cerber: Exploitation of CVE-2023-22518 for Ransomware Deployment Huntress Details Confluence CVE-2023-22518 Exploitation Leading to Cerber Ransomware
- Win.Dropper.Cerber-9905750-0 Talos Roundup Highlights Eight Malware Threats Observed Oct. 29–Nov. 5
CVE (6)
Malware (14)
MITRE ATT&CK (7)
Vendors (4)
Products (9)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
