Urgent! .LOCK3D ransomware is attacking your TNAS

Official announcements and latest news, awards from medias, and sucess stories.
User avatar
TMroy
TerraMaster Team
Posts: 2578
Joined: 10 Mar 2020, 14:04
China

Urgent! .LOCK3D ransomware is attacking your TNAS

Post by TMroy »

So far, we have received several reports about TNAS being attacked by new ransomware. The data in the attacked device is encrypted into .lock3d encrypted file, the TOS webpage cannot be accessed, and the page reports a 403 error. It may be that the ransomware has encrypted some system files, making the system pages inaccessible. We are still gathering more information.

Common features of the attached TNAS devices:
1. All x.86 models;
2. Running an older system, 4.2.x or even 4.1.x;

We urge you to take immediate action with reference to the following guidelines to prevent your device from being attacked!
viewtopic.php?f=6&t=2877
To contact our team, please send email to following addresses, remember to replace (at) with @:
Support team: support(at)terra-master.com (for technical support only)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)
User avatar
commaimagination
Posts: 1
Joined: 02 Dec 2022, 11:09

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by commaimagination »

My case on november 25 a boot time (The NAS shutdown everyday at 12pm and reboot at 8am). Looking for decryption solution.
User avatar
fpsking
Posts: 6
Joined: 20 Mar 2021, 06:15

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by fpsking »

Is there detailed step by step to disable my TerraMaster F4-422 from being online my device has been hit with ransomware a few times now
User avatar
TMroy
TerraMaster Team
Posts: 2578
Joined: 10 Mar 2020, 14:04
China

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by TMroy »

{L_BUTTON_AT}fpsking
it is easy!
1. update your TOS to version 5;
2. enable the "Isolation mode" on "control panel > general setting > security" ;
To contact our team, please send email to following addresses, remember to replace (at) with @:
Support team: support(at)terra-master.com (for technical support only)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)
User avatar
REBELinBLUE
Posts: 29
Joined: 05 Dec 2021, 06:37

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by REBELinBLUE »

and for people with an ARM NAS who still can't update to TOS 5?
User avatar
crisisacting
Posts: 258
Joined: 20 Jan 2022, 16:42

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by crisisacting »

REBELinBLUE wrote: 13 Dec 2022, 23:30 and for people with an ARM NAS who still can't update to TOS 5?
Terra-Master recently silently released their 211 ARM series with TOS 5, so if it can be backported, there may actually be an ARM TOS 5 upgrade plan/path for the end of life 210 series.
User avatar
REBELinBLUE
Posts: 29
Joined: 05 Dec 2021, 06:37

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by REBELinBLUE »

crisisacting wrote: 14 Dec 2022, 03:27
REBELinBLUE wrote: 13 Dec 2022, 23:30 and for people with an ARM NAS who still can't update to TOS 5?
Terra-Master recently silently released their 211 ARM series with TOS 5, so if it can be backported, there may actually be an ARM TOS 5 upgrade plan/path for the end of life 210 series.
Not sure how 210 can be described as EOL when they still sell it https://www.terra-master.com/uk/product ... ?page=desc
User avatar
crisisacting
Posts: 258
Joined: 20 Jan 2022, 16:42

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by crisisacting »

{L_BUTTON_AT}REBELinBLUE

Something can be end of life while there's still stock of it.

If it isn't end of life yet, it will be sooner than later with a new series available.
User avatar
TerraNas2
Posts: 7
Joined: 17 Feb 2022, 11:29

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by TerraNas2 »

When there are urgent issues like this, Terramaster should email people who have registered their email in the app and forum. I only check this forum monthly, unless I need help, most people probably check it even less. It would be very beneficial to send emails as soon as these issues are found.
User avatar
TMroy
TerraMaster Team
Posts: 2578
Joined: 10 Mar 2020, 14:04
China

Re: Urgent! .LOCK3D ransomware is attacking your TNAS

Post by TMroy »

Thank you for your advice.
To contact our team, please send email to following addresses, remember to replace (at) with @:
Support team: support(at)terra-master.com (for technical support only)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)
Post Reply