If you have a Western Digital My Book Live, you must disconnect it from the internet as soon as possible, otherwise you can wake up to an empty disk.
WD believes criminals factory-wiped disks online
The content deletes all the content on the disk, and according to affected customers, they have not been able to create any of the content.
Thread Starter in the WD Forum Explains What Happened:
I have a WD My Book Live connected to my home network and everything worked fine for a number of years. I just found out that for some reason all the data is gone – the folders are there, but they are empty of content “, wrote the customer who had the 2TB disk almost full of content, while it is now full capacity again.
Unhappy WD customer
These disks were last updated in 2015
For some reason, the disks have been factory-deleted over the network as the following operations have been observed for the affected devices
Jun 23 15:14:05 MyBookLive factoryRestore.sh: begin script:
Jun 23 15:14:05 MyBookLive shutdown[24582]: shutting down for system reboot
Jun 23 16:02:26 MyBookLive S15mountDataVolume.sh: begin script: start
Jun 23 16:02:29 MyBookLive _: pkg: wd-nas
Jun 23 16:02:30 MyBookLive _: pkg: networking-general
Jun 23 16:02:30 MyBookLive _: pkg: apache-php-webdav
Jun 23 16:02:31 MyBookLive _: pkg: date-time
Jun 23 16:02:31 MyBookLive _: pkg: alerts
Jun 23 16:02:31 MyBookLive logger: hostname=MyBookLive
Jun 23 16:02:32 MyBookLive _: pkg: admin-rest-api
Western Digital states that they have not been hacked, but that the affected devices have been attacked. The company is not exactly sure what has happened, but they keep customers up to date this page.
–
