Attacked by a ransomware, what now?

[elvenwhite]

Hello,

My MyCloud EX2 has attacked by a ransomware last night.
I’ve connected the NAS with myCloud app and found the files are encrypted, and did a quick search.
Several links told me there was a vulnerability fixed in recent firmware update, which I’ve missed.

Two of my windows desktops mapped the NAS as a network drive, but they are all green, so I suspect the NAS was target of the attack, and immediately decided to do the firmware update. (Curse myself, I’ve turned on SMB sharing for test just several days ago…)

After 30 minutes, My Cloud EX 2 was bricked. all of its LEDs gone red. Tried 40 sec reset but in vain.

What can I do now? I can’t try any recovery method now…

[NAS_user]

DANG.

I hate reading stuff like this.

Do you remember despair.com? Reminds me of their poster for “mistakes”.

I am not sure the firmware upgrades for the EX2’s addressed this particular issue. . . . the firmware addressed other documented vulnerabilities. Definitely you don’t want drive letter access to a NAS box.

Frankly, I am not sure you even want any internet access to a NAS box. At this point, I don’t even allow mycloud.com access. If I become crazy enough to buy (yet) another NAS, I might set one up as a trial (expendable) unit.