News:

Buffalo provides Data Recovery services. Read about it here.

Main Menu

Checkmate Ransom

Started by Gnole, August 27, 2022, 09:45:41 AM

Previous topic - Next topic

Gnole

My LS2100 was connected to my network and accessed remotely by wired PCs, wireless PC, iPhones and iPads that are connected to the network or via the BuffaloNAS app. I only use it to serve my photos and music files and only family members have access.

Today I went to access a photo via the iPad app and found all of the files are renamed "Checkmated".
I then looked directly at the drive via a PC and found a Checkmate Ransomware text file with instructions for decrypting.
I turned off the Linkstation and unplugged it from the network. I do not need the data as I have multiple back-ups on various media; I only used the link station for convenience as a file server.

I am not a high-level tech so I am not at all clear on how this occurred. I keep up with the basics of my PC updates and Windows Defender so I do not understand the route to Linkstation when the PCs and iPads all are operating fine. But I do not update or interact with the Linkstation other than access it remotely so I'm not sure what I could have done to protect it. What safeguards did I not have?

In an case, can I wipe the LinkStation and reinstall files from backup? How do I do this? If I did this, is the virus still in the linkstation and could it reoccur?
Lol, I would consider just buying a new one and start over, but I don't know what to do differently to insure it doesn't happen again.

Any help would be greatly appreciated.

-Greg

Browser ID: smf (is_webkit)
Templates: 4: index (default), Display (default), GenericControls (default), GenericControls (default).
Sub templates: 6: init, html_above, body_above, main, body_below, html_below.
Language files: 5: index+Modifications.english (default), Post.english (default), Editor.english (default), Drafts.english (default), StopForumSpam.english (default).
Style sheets: 4: index.css, attachments.css, jquery.sceditor.css, responsive.css.
Hooks called: 109 (show)
Files included: 35 - 1354KB. (show)
Memory used: 925KB.
Tokens: post-login.
Queries used: 16.

[Show Queries]