An update that destroys the NAS and deletes all data began to arrive yesterday, for many it flew in this morning.
WD now want to avoid financial responsibility, so send all friendly media message about abstract hackers.
But it is not hackers, it is "gender and race neutral workforce" first results.
"Western Digital has determined that some My Book Live devices are being compromised by malicious software. In some cases, this compromise has led to a factory reset that appears to erase all data on the device. The My Book Live device received its final firmware update in 2015. We understand that our customers’ data is very important. At this time, we recommend you disconnect your My Book Live from the Internet to protect your data on the device. We are actively investigating and we will provide updates to this thread when they are available." - Western Digital
At least installation of this uses standard WD update mechanism.
According to a new report, hackers have exploited a 0-day bug, not the one discovered in 2018, to mass-wipe WD My Book Live Devices. It appears as though Western Digital intentionally removed lines of code that would have prevented it. A developer from the Western Digital team actually coded a requirement for a password before a factory reset was performed, but that requirement was later removed.
It looks like you're new here. If you want to get involved, click one of these buttons!