For the uninitiated, WD My Book is a network-attached storage (NAS) device that looks like a closed book, hence the name. The WD My Book Live app allows owners to access their files and manage their devices remotely, even if the NAS is behind a firewall or router. When users attempted to log in via the Web dashboard, the device stated that they had an “Invalid password.” One user said that his drive had 2TB worth of content and that it worked for years but is now showing full capacity.
A few owners dug into the issue themselves and reported that the MyBook logs showed that the devices received a remote factory reset command starting at around 3 PM yesterday and through the night. In a response to BleepingComputers, WD insists that their servers were not compromised, but user accounts were instead affected by said malicious software. While it is seemingly plausible, the theory still does not explain how these attacks affected numerous users simultaneously. (Source: BleepingComputers // Images: WD Forum, TechCrunch)
