Owners of various Asustor Network Attached Storage (NAS) device models took to Reddit and the company’s official forum today, alerting others of an active ransomware attack holding hostage their media libraries and other stored data (via Windows Central and Tom’s Hardware). At first, it was suspected that users using Asustor’s EZConnect configuration feature were vulnerable, but according to accounts from some affected Reddit users, they had the service turned off on their NAS.
The r/asustor community is keeping track of the available information here, and after cross-referencing the services on affected devices, suspect Plex as one of the possible attack vectors.
