Western Digital says some My Book Live devices are being compromised by malware leading to a factory reset erasing all data, believes its servers weren't hacked
Mybookliveduo - looks to have formatted itself WD Community : Action Required on My Book Live and My Book Live Duo Ashwin / gHacks Technology News : Western Digital My Book Live drives are getting wiped on their own; company advises users to unplug it from the internet Hoakley / The Eclectic Light Company : When your backups vanish — This week backups relying on the services have hit the headlines … Om Malik / On my Om : What (a) Disaster — A couple of days ago, I pointed out the risks we all have from companies … Digital Photography Review : PSA: If you use a Western Digital My Book Live HDD, disconnect it now Ryan Whitwam / ExtremeTech : Time to Unplug: WD My Book Live Hard Drives Hit With Data Deletion Exploit Paul Lilly / PC Gamer : Disconnect your WD My Book Live from the web or you could lose all your data Usman Qureshi / iPhone in Canada Blog : Western Digital My Book NAS Devices Being Mysteriously Wiped Clean Oliver Haslam / iMore : This Western Digital data deletion thing is a reminder about offsite backup Lisa Vaas / Threatpost : My Book Live Users Wake Up to Wiped Devices, Active RCE Attacks Gabe Gurwin / GameSpot : Western Digital My Book Drives Are Vulnerable To Attack, Can Be Erased Patrick O'Rourke / mobilesyrup.com : ‘Malicious software’ is deleting WD My Book Live NAS drive data Antonia Din / Heimdal Security Blog : WD My Book Live NAS Devices Reformatted Remotely All Over the World Alex Gatewood / KnowTechie : WD My Book Live owners need to unplug their device or risk losing everything Amber Neely / AppleInsider : Western Digital My Book Live devices being remotely wiped by attackers Tom Pritchard / Tom's Guide : WD My Book Live storage drives are being remotely wiped — disconnect yours now Rich Edmonds / Windows Central : Own a WD My Book Live? Unplug it from your LAN right now. Matt Milano / IT Management : Western Digital My Book NAS Devices Being Factory Reset Remotely Mayank Sharma / TechRadar : Western Digital My Book devices hit by malware that deletes files, resets device Ian Evenden / Tom's Hardware : WD My Book Live Owner's Data Disappears Overnight Ben Lovejoy / 9to5Mac : PSA: Western Digital My Book Live drives being maliciously erased; disconnect them from internet Matthew Humphries / PCMag : Unplug My Book Live Devices Immediately to Avoid Your Data Being Erased Scott Scrivens / Android Police : You should unplug your WD My Book Live immediately if you don't want to lose all your data Karanveer Singh Arora / BGR India : Plug out your Western Digital My Book Live now or risk losing all your data Tim Hardwick / MacRumors : Western Digital Asks ‘My Book Live’ Device Owners to Unplug After Reports of Remotely Wiped Drives Mariella Moon / Engadget : Western Digital blames malware for My Book Live devices being wiped remotely Trevor Mogg / Digital Trends : WD My Book Live owners need to act now to protect their data Mitchell Clark / The Verge : Unplug your WD My Book Live, or you might find your drive's data wiped JC Torres / SlashGear : WD My Book Live NAS devices are being reformatted remotely Tweets: Ned Pyle / @nerdpyle : If you know anyone with a Western Digital My Book consumer NAS, tell them to disconnect it from the internet. Firmware hasn't been updated in years & someone is wiping them for fun https://twitter.com/... https://twitter.com/... @briankrebs : Western Digital is telling MyBook Live customers to unplug the devices from the net. Attackers have been wiping drives via a 10 y/o remote command execution bug. Researchers informed WD, posted exploit code in 2018; WD says the products no longer supported https://krebsonsecurity.com/ ... Mark Nunnikhoven / @marknca : ...and here's the actual support bulletin on the problem “At this time, we recommend you disconnect your My Book Live and My Book Live Duo from the Internet to protect your data on the device.” https://www.westerndigital.com/ ... https://twitter.com/... @vice : “I have lost 4TB of data, this includes all my insurance policies, budgets, the usual ‘life admin,’ as well as all the photos of my children, my wedding, etc but just as importantly my livelihood.” https://www.vice.com/... @nbougalis : Horrible response from @westerndigital. All the more reason to avoid devices from manufacturers that don't make it easy for users to update/maintain software, especially after official support has ended. Don't buy crap like the WD My Book. Easy (and cheaper!) to build your own! https://twitter.com/... @motherboard : Users of Western Digital's WD My Book Live devices are reporting that all of their data has been remotely wiped by hackers exploiting a vulnerability. https://www.vice.com/... Lorenzo Franceschi-Bicchierai / @lorenzofb : NEW: Hackers are wiping people's internet-connected Western Digital hard drives. Some of the victim's stories are awful. It'll be interesting to see what the company does to remediate this mess. Offering free credit monitoring may not cut it this time. https://www.vice.com/... https://twitter.com/... Lon Seidman / @lonseidman : The last firmware update for this discontinued product was 2015 - another reason why I believe nothing on your network should be exposed directly to the Internet. Turn off upnp on your router and use a VPN if you need to access from the outside. https://twitter.com/... Avast / @avast_antivirus : The My Book Live is an older device (last update 2015), mainly used by consumers and SMBs. If you, your business or someone you know use one of these devices you should disconnect it immediately and follow the official @WD advisory here: https://community.wd.com/... Thomas Reed / @thomasareed : NEVER rely on only one single backup, or one single backup system. Keep at least two separate backups, created with two different backup systems. Even better, make sure at least one set of backups is off-site at all times. https://twitter.com/... Chris Vickery / @vickerysec : That's funny— I have a lot of encrypted storage containers on a pair of large Western Digital “My Book” devices. It's a good thing I would never run the default factory-software they come with. Also good that I would never use cloud services in combination with them. https://twitter.com/...