Our reader Gunther J. only found a blackmail letter on his NAS instead of his data. We explain how it came about – and how you can protect yourself.

(Image: Photon photo / Shutterstock.com)

Network storage: operate NAS securely and protect it from attacks Ransom note instead of holiday photos Now it is your turn! Firmware updates turn off UPnP Configure router Read article in c’t 2 / 2021 When c’t reader Gunther J. wanted to browse his vacation photos, he had an unpleasant surprise : All files on the otherwise reliable NAS (Network Attached Storage) were deleted. Instead, he discovered a file called “DATA RECOVERY!! !!. Txt” that begins with: “YOUR REMOTE STORAGE WAS COMPROMISED. YOUR FILES ARE IN OUR POSSESSION.” J. had apparently become the victim of a cyber gang who had tampered with his vacation photos.

The perpetrators claimed that the files were safe, encrypted on a server. In order to free the vacation photos from the digital hostage, J. 0, 03 Bitcoin to the address 18 bvWVxx3KD3gaqkBoPSwShimUWkG1eZNL transfer, this corresponds to approximately 400 Euro. But there were two problems: On the one hand, the deadline of the blackmail group, which ironically calls itself “Data Recovery”, had long expired – J. had only discovered the misery after two months. On the other hand, it is always a bad idea to negotiate with blackmailers.

Together with his wife, Gunther J. looked for a way to save the holiday photos. Then she had an idea, which was implemented shortly afterwards: The two called the c’t editorial office. We are frequently contacted by victims of cyber extortion, but this case aroused our curiosity. Because it was completely a mystery how the perpetrators could access the NAS. It quickly became clear that the caller had carefully set up and configured his home network.

Access to all contents of heise + exclusive tests, advice & background: independent, critically sound c’t, iX, Technology Review, Mac & i, Make, c’t Read photography directly in the browser register once – on all devices read – can be canceled monthly first month free, then monthly 9 , 95 € Weekly newsletter with personal reading recommendations from the editor-in-chief Start FREE month Now start the FREE month heise + already subscribed?

Sign in and read Register now and read the article immediately More information about heise + Network storage: operate NAS securely and protect it from attacks Ransom note instead of holiday photos Now it is your turn! Firmware updates turn off UPnP Configure router Read article in c’t 2 / 2021