# A Hacker Gang is Wiping Lenovo NAS Devices and Asking for Ransoms

**URL:** <https://onehack.st/t/a-hacker-gang-is-wiping-lenovo-nas-devices-and-asking-for-ransoms/94504>\
**Category:** News & Articles\
**Tags:** tools, hacking\
**Created:** [June 30, 2020, 2:45pm UTC](https://onehack.st/t/a-hacker-gang-is-wiping-lenovo-nas-devices-and-asking-for-ransoms/94504 "2020-06-30T14:45:54Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [June 30, 2020, 2:45pm UTC](https://onehack.st/t/a-hacker-gang-is-wiping-lenovo-nas-devices-and-asking-for-ransoms/94504/1 "2020-06-30T14:45:54Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/5/d/5d718576fca39bb4f5152f280d7825d4aa707c17.png)

A hacker group going by the name of ‘Cl0ud SecuritY’ is breaking into [old LenovoEMC (formerly Iomega) network-attached storage (NAS) devices, wiping files, and leaving ransom notes behind](https://www.zdnet.com/article/a-hacker-gang-is-wiping-lenovo-nas-devices-and-asking-for-ransoms/) asking owners to pay between $200 and $275 to get their data back. From a report:

_Attacks have been happening for at least a month, according to entries on BitcoinAbuse, a web portal where users can report Bitcoin addresses abused in ransomware, extortions, cybercrime, and other online scams. Attacks appear to have targeted only LenovoEMC/Iomega NAS devices that are exposing their management interface on the internet without a password. ZDNet was able to identify around 1,000 such devices using a Shodan search._