Photo Corners headlinesarchivemikepasini.com
A S C R A P B O O K O F S O L U T I O N S F O R T H E P H O T O G R A P H E R
Enhancing the enjoyment of taking pictures with news that matters, features that entertain and images that delight. Published frequently.
WD NAS Devices Losing Data From Factory Reset
25 June 2021
Western Digital has issued an advisory to address a mysterious factory reset that has wiped data from its My Book Live network attached storage devices. The devices can be accessed remotely by their owners using an app even if the device is behind a firewall.
In Recommended Security Measures for WD My Book Live and WD My Book Live Duo, the company wrote:
Western Digital has determined that some My Book Live and My Book Live Duo devices are being compromised through exploitation of a remote command execution vulnerability. In some cases, this compromise has led to a factory reset that appears to erase all data on the device. The My Book Live and My Book Live Duo devices received its final firmware update in 2015. We understand that our customers' data is very important. We are actively investigating the issue and will provide an updated advisory when we have more information.
In the meantime, the company advised, "At this time, we recommend you disconnect your My Book Live and My Book Live Duo from the Internet to protect your data on the device."
For many that advice comes too late. According to a report by Lawrence Abrams, the factory reset command was unleased around 3 p.m. yesterday and continued through the night.
"Some users affected by this attack have reported success recovering some of their files using the PhotoRec file recovery tool," he wrote.