Page 1 of 2
Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 25 Nov 2022, 10:28
by TMroy
So far, we have received several reports about TNAS being attacked by new ransomware. The data in the attacked device is encrypted into .lock3d encrypted file, the TOS webpage cannot be accessed, and the page reports a 403 error. It may be that the ransomware has encrypted some system files, making the system pages inaccessible. We are still gathering more information.
Common features of the attached TNAS devices:
1. All x.86 models;
2. Running an older system, 4.2.x or even 4.1.x;
We urge you to take immediate action with reference to the following guidelines to prevent your device from being attacked!
viewtopic.php?f=6&t=2877
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 02 Dec 2022, 11:15
by commaimagination
My case on november 25 a boot time (The NAS shutdown everyday at 12pm and reboot at 8am). Looking for decryption solution.
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 10 Dec 2022, 03:49
by fpsking
Is there detailed step by step to disable my TerraMaster F4-422 from being online my device has been hit with ransomware a few times now
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 10 Dec 2022, 12:44
by TMroy
it is easy!
1. update your TOS to version 5;
2. enable the "Isolation mode" on "control panel > general setting > security" ;
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 13 Dec 2022, 23:30
by REBELinBLUE
and for people with an ARM NAS who still can't update to TOS 5?
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 14 Dec 2022, 03:27
by crisisacting
REBELinBLUE wrote: ↑13 Dec 2022, 23:30
and for people with an ARM NAS who still can't update to TOS 5?
Terra-Master recently silently released their 211 ARM series with TOS 5, so
if it can be backported, there may actually be an ARM TOS 5 upgrade plan/path for the end of life 210 series.
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 14 Dec 2022, 05:14
by REBELinBLUE
crisisacting wrote: ↑14 Dec 2022, 03:27
REBELinBLUE wrote: ↑13 Dec 2022, 23:30
and for people with an ARM NAS who still can't update to TOS 5?
Terra-Master recently silently released their 211 ARM series with TOS 5, so
if it can be backported, there may actually be an ARM TOS 5 upgrade plan/path for the end of life 210 series.
Not sure how 210 can be described as EOL when they still sell it
https://www.terra-master.com/uk/product ... ?page=desc
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 14 Dec 2022, 05:17
by crisisacting
Something can be end of life while there's still stock of it.
If it isn't end of life yet, it will be sooner than later with a new series available.
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 21 Dec 2022, 07:55
by TerraNas2
When there are urgent issues like this, Terramaster should email people who have registered their email in the app and forum. I only check this forum monthly, unless I need help, most people probably check it even less. It would be very beneficial to send emails as soon as these issues are found.
Re: Urgent! .LOCK3D ransomware is attacking your TNAS
Posted: 21 Dec 2022, 19:52
by TMroy
Thank you for your advice.