Urgent! .LOCK3D ransomware is attacking your TNAS

Official announcements and forum rules.
User avatar
TMroy
Customer Service
Posts: 2148
Joined: 10 Mar 2020, 14:04

Urgent! .LOCK3D ransomware is attacking your TNAS

Post by TMroy » 25 Nov 2022, 10:28

So far, we have received several reports about TNAS being attacked by new ransomware. The data in the attacked device is encrypted into .lock3d encrypted file, the TOS webpage cannot be accessed, and the page reports a 403 error. It may be that the ransomware has encrypted some system files, making the system pages inaccessible. We are still gathering more information.

Common features of the attached TNAS devices:
1. All x.86 models;
2. Running an older system, 4.2.x or even 4.1.x;

We urge you to take immediate action with reference to the following guidelines to prevent your device from being attacked!
viewtopic.php?f=6&t=2877
To contact our team, please send email to following addresses, remember to replace (at) with @:
Technical team: support(at)terra-master.com (for technical support only)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)

User avatar
commaimagination
Posts: 1
Joined: 02 Dec 2022, 11:09

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by commaimagination » 02 Dec 2022, 11:15

My case on november 25 a boot time (The NAS shutdown everyday at 12pm and reboot at 8am). Looking for decryption solution.

User avatar
fpsking
Posts: 6
Joined: 20 Mar 2021, 06:15

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by fpsking » 10 Dec 2022, 03:49

Is there detailed step by step to disable my TerraMaster F4-422 from being online my device has been hit with ransomware a few times now

User avatar
TMroy
Customer Service
Posts: 2148
Joined: 10 Mar 2020, 14:04

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by TMroy » 10 Dec 2022, 12:44

{L_BUTTON_AT}fpsking
it is easy!
1. update your TOS to version 5;
2. enable the "Isolation mode" on "control panel > general setting > security" ;
To contact our team, please send email to following addresses, remember to replace (at) with @:
Technical team: support(at)terra-master.com (for technical support only)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)

User avatar
REBELinBLUE
Posts: 20
Joined: 05 Dec 2021, 06:37

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by REBELinBLUE » 13 Dec 2022, 23:30

and for people with an ARM NAS who still can't update to TOS 5?

User avatar
crisisacting
Posts: 111
Joined: 20 Jan 2022, 16:42

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by crisisacting » 14 Dec 2022, 03:27

REBELinBLUE wrote:
13 Dec 2022, 23:30
and for people with an ARM NAS who still can't update to TOS 5?
Terra-Master recently silently released their 211 ARM series with TOS 5, so if it can be backported, there may actually be an ARM TOS 5 upgrade plan/path for the end of life 210 series.

User avatar
REBELinBLUE
Posts: 20
Joined: 05 Dec 2021, 06:37

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by REBELinBLUE » 14 Dec 2022, 05:14

crisisacting wrote:
14 Dec 2022, 03:27
REBELinBLUE wrote:
13 Dec 2022, 23:30
and for people with an ARM NAS who still can't update to TOS 5?
Terra-Master recently silently released their 211 ARM series with TOS 5, so if it can be backported, there may actually be an ARM TOS 5 upgrade plan/path for the end of life 210 series.
Not sure how 210 can be described as EOL when they still sell it https://www.terra-master.com/uk/product ... ?page=desc

User avatar
crisisacting
Posts: 111
Joined: 20 Jan 2022, 16:42

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by crisisacting » 14 Dec 2022, 05:17

{L_BUTTON_AT}REBELinBLUE

Something can be end of life while there's still stock of it.

If it isn't end of life yet, it will be sooner than later with a new series available.

User avatar
TerraNas2
Posts: 5
Joined: 17 Feb 2022, 11:29

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by TerraNas2 » 21 Dec 2022, 07:55

When there are urgent issues like this, Terramaster should email people who have registered their email in the app and forum. I only check this forum monthly, unless I need help, most people probably check it even less. It would be very beneficial to send emails as soon as these issues are found.

User avatar
TMroy
Customer Service
Posts: 2148
Joined: 10 Mar 2020, 14:04

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by TMroy » 21 Dec 2022, 19:52

Thank you for your advice.
To contact our team, please send email to following addresses, remember to replace (at) with @:
Technical team: support(at)terra-master.com (for technical support only)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)

Post Reply