HR Ransomware attack on NAS

patmik

Hello,


Do we have someone who was impacted on HR Ransomware here? Here is the discussion also about that: https://www.bleepingcomputer.com/forums/t/714659/hr-nas-ransomware-hr;-ransom-notetxt-support-topic/
I've all my photos modified to 77 KB and added .HR extension additionally I've received a BitCoin wallet to pay an amount to get all of my data get.
I had Firmware V5.21(AAZF.5)C0 at that time. Now I've upgraded to Firmware V5.21(AAZF.7)C0 but it is too late.
Does anyone a good solution for this (of course without paying any money to the cybercriminals)?
Upgrade your firmware now!
Thanks!


#NAS_Mar_2020

JockeSve

Any idea(s) of how they attacked the NAS? 
Unprotected/weak cloud services?

Mijzelf

@JockeSve : https://homeforum.zyxel.com/discussion/3317/zyxel-security-advisory-for-the-remote-code-execution-vulnerability-of-nas-products

@patmik : Reading that thread it appears to me that the original files are deleted, and not wiped. A tool like PhotoRec should be able to restore your data.

JockeSve

@Mijzelf : TY!