Attacks Erase Western Digital Network-Attached Storage Drives
Western Digital has determined that some My Book Live devices are being compromised by malicious software. In some cases, this compromise has led to a factory reset that appears to erase all data on the device. According to Western Digital, attackers directly connected to the affected My Book Live devices from a variety of IP addresses in different countries. This indicates that the affected devices were directly accessible from the Internet, either through direct connection or through port forwarding that was enabled either manually or automatically via UPnP.
What Should You Do?
It is recommended you disconnect your My Book Live and My Book Live Duo from the Internet. Instructions on how to do this can be found here:
https://support-en.wd.com/app/answers/detail/a_id/31607. Have additional questions? Reach out to a member of the BMT team.
