Tnas F4-210 got hit with Ransomware by *** By LVT LOCKER ***

[arnau97]

Oh man, I'm so sorry

So you can only recover a part from the data?

[sigallai]

It seems so. I haven't gone through everything yet. But seems some of the decrypted files l went through so far are corrupted and some aren't. It's hit and miss.

[arnau97]

Same here...

Wel, fucking bastards, I don't know the purpose about ruining People's NAS

[sigallai]

Oh, so the decryptor did work on some of your hacked files? If that's the case I'm glad I was able to help you recover at least some files.

[arnau97]

Well, I tried on the most important files and they were corrupted and couldn't recover them

[sigallai]

Ah geez. Sorry to hear that. Wish it would have worked for you.

[arnau97]

No worries

I'll just start again, with a new system (not TNAS) and hope it doesn't happen again.

[Gremlin]

Whatever system you go with, just make sure to keep it updated, particularly for security aspects, and protect your local network (for example make sure upnp is disabled on your router). Make regular backups.

[Ann0yU5er]

I haven't needed to touch my storage. I discovered today that all files had these weird LVT extensions dated a change in April. I saw a post dated back from 2022 on this. Terra needs to write better guide to plug this vulnerability. It's not hard to use 2FA or have transaction-based action that can undo activities from bad actors. Terra should have learned this from 2 years back and ensure users were not connecting their NAS to the internet. Server can work just fine on their local network. Create a VPN or point-to-point to the main client. I reformatted my drives because I will not participate in feeding a bunch of losers who steal and rob.

[dizzastaffy]

could you possibly send me the key they sent you to try also please? I know it is highly unlikely to work but worth a shot. 0.01 bitcoin is now £634 which crazy and emailed them to check it still valid and no response. Desperately need the data back