On 5/6/23 17:00, 😉 Good Guy 😉 wrote:
> Some of you might have received an email from Western Digital about
> Data Breach where the hacker managed to download the entire database
> from their Linux Server(s) and it took them weeks to notice it!
>
> A partial screenshot of the email is attached as a link here but there
> are stories all over the internet. You have to search for these
> stories using Bing (AI powered) or Google.
>
> [img] <https://i.imgur.com/W1eaU3g.png>
>
>
You are full of shit and misinformation. From what I discern you are
unsolicited information.

On 5/6/2023 4:50 PM, Nic wrote:
> On 5/6/23 17:00, 😉 Good Guy 😉 wrote:
>> Some of you might have received an email from Western Digital
>>
> You are full of shit and misinformation. From what I discern you are unsolicited information.
>

It's just lookup for My Cloud service (finding your home NAS public IP while sitting at Starbucks).

https://www.bleepingcomputer.com/news/security/western-digital-discloses-network-breach-my-cloud-service-down/

"Since Sunday, multiple users of Western Digital network-attached storage (NAS) service My Cloud
have been reporting they couldn't access their cloud-hosted media repositories."

Not all of these, may be Cloud based data storage. Some of these
setups, are for using your home NAS while sitting at Starbucks.
And to do that, you need an IP address.

Your data does not go through the WD server. This is the
equivalent of a DynDNS service.

On at least some broadband services, as soon as you reboot your
router, your public IP changes.

*******

The main danger from this incident, is GG mentioning that customers
using the service are receiving an email.

The implication is, if the hacker has the email address, he can craft
phishing emails that look like they are from WD, when they are not from WD.

Be especially wary of any attachments, or any bogus attempts
to extract additional information from you (like, a password,
if a password was used for some bizarre reason).

A Cloud DNS Lookup does not particularly need a lot of info to work,
and a reasonable design, would be to not collect too much information
that could be used for phishing, in the event of a breach.

My buddy in the other group, the one who had his computer room completely
wiped by ransomware, it was because he double-clicked an attachment on
a phishing email from GoDaddy. It's because the GoDaddy info was "public knowledge",
his email being on a domain registration entry, that the ransomware people
could craft a realistic looking email (knew that he did business with GoDaddy),
and fool him into "trusting" the attachment as being a legit business transaction.

If you do receive an email from WD, it might not actually be from WD.
Use Safe Hex handling procedures, rubber boots and rubber gloves.
DONT double click an attachment, or start giving away passwords
via some fake web page the hacker runs.

Paul