Synology had an outbreak of cryptolocker that was custom written for their platform (Google SynoLocker). Users opened remote access without changing default passwords or updating their firmware to patch exploits, so eventually someone took advantage of that.

The only two REAL solutions that I encountered: 1) restore from a separate, unaffected backup, or 2) pay the ransom.

Ransomware can compromise the entire file system depending on the flavor, so having multiple backups on the same volume (or sometimes, even the same LAN) does not guarantee protection.

Offsite backup into something password protected is the only way to go.

It was a rude awakening for a lot of Synology home users about business level best practice for network security... "Why would I need an offsite backup? I have RAID, doesn't that protect my data already?"

Unfortunately many users HAD to pay the ransom to decrypt their files as they had no other means to recover that data. I would not suggest this except as a last resort - the group behind SynoLocker did provide a working key, but I have read that others do not.

My name is Jordan from Bellevue WA. I am an IT hardware pro with sales and technical experience. Currently an executive sales manager at Synology.

I am here for two reasons - 1. provide informal representation for Synology and 2. Networking and learning from all of you!

Ok, no quotas - got that one loud and clear

Thanks for the responses! Anyone else?

@scottalanmiller Across town in Bellevue. Same city, just went from ~40 seats to ~200. Took over Concur's old space in the Factoria area.

Hi all,

I would like to know, what are your MOST or LEAST favorite parts of your VAR partner programs with your hardware vendors?

Disclosure - I represent a mid-market IT hardware vendor and we are looking to overhaul our partner program offerings. I am doing a little informal market research.

Thanks in advance!

OK I'll bite - I am packing my cubicle to move into our new office this weekend! Whee

My name is Jordan from Bellevue WA. I am an IT hardware pro with sales and technical experience. Currently an executive sales manager at Synology.

I am here for two reasons - 1. provide informal representation for Synology and 2. Networking and learning from all of you!

Synology had an outbreak of cryptolocker that was custom written for their platform (Google SynoLocker). Users opened remote access without changing default passwords or updating their firmware to patch exploits, so eventually someone took advantage of that.

The only two REAL solutions that I encountered: 1) restore from a separate, unaffected backup, or 2) pay the ransom.

Ransomware can compromise the entire file system depending on the flavor, so having multiple backups on the same volume (or sometimes, even the same LAN) does not guarantee protection.

Offsite backup into something password protected is the only way to go.

It was a rude awakening for a lot of Synology home users about business level best practice for network security... "Why would I need an offsite backup? I have RAID, doesn't that protect my data already?"

Unfortunately many users HAD to pay the ransom to decrypt their files as they had no other means to recover that data. I would not suggest this except as a last resort - the group behind SynoLocker did provide a working key, but I have read that others do not.