WD My Book Live owners have been advised to disconnect the storage devices from their network as users have discovered that their data has seemingly been deleted from their respective storage device and could no longer log on, either through browser or app. WD, in its community forum, says that the data loss appears to be the result of “malicious software” and advises any My Book Live or My Book Live Duo owners to immediately disconnect their devices from the internet to protect their data.
For the uninitiated, WD My Book is a network-attached storage (NAS) device that looks like a closed book, hence the name. The WD My Book Live app allows owners to access their files and manage their devices remotely, even if the NAS is behind a firewall or router.
When users attempted to log in via the Web dashboard, the device stated that they had an “Invalid password.” One user said that his drive had 2TB worth of content and that it worked for years but is now showing full capacity.
A few owners dug into the issue themselves and reported that the MyBook logs showed that the devices received a remote factory reset command starting at around 3 PM yesterday and through the night.
In a response to BleepingComputers, WD insists that their servers were not compromised, but user accounts were instead affected by said malicious software. While it is seemingly plausible, the theory still does not explain how these attacks affected numerous users simultaneously.
(Source: BleepingComputers // Images: WD Forum, TechCrunch)
