Ransomware -> Configfiles encrypted

Installation Home Assistant OS
1

Hello all,

Recently started to work with HA, I came from OpenHab, let me first say thanks to all you people for making a great product with great support!.. Now my question;

I’m a bit embarrassed to tell, but last week my PC got hacked an “hackers” gained access to my machine… From that machine a share was opened to my HA config folder…
Ransomware was installed and all personal files were crypted, including all the files on HA share (config folder and backup folder). I was still busy with migrating from OpenHab etc, so no backups have been transferred outside of the Intel NUC (running device for HA).

Currently, HA is still running fine with all files crypted (I assume it is loading all automations etc from memory?). I guess my question is… Is there any change of getting the automation, configuration, script etc back from memory? I also have access to the GUI still. I’m afraid that, after a reboot or reload of HA, everything is gone and I have to start over… Maybe eventually, but I can always try right…

Hope for some advice!

Regards,

Caveman85

1 Like
2

Try creating a snapshot and hope it doesn’t get encrypted before you get it off the machine. I would closely inspect the contents of the snapshot to ensure it doesn’t have anything that could infect the new host.

You can download the snapshot to any machine from the UI.

3

The snapshot will include the files as they are on disk, already encrypted…

This is a good time to set up remote backups :wink:

4

Woops, didn’t think that all the way through.

5

Ive already tried a snapshot, but indeed, all encrypted files are included in the snapshot unfortunately

6

Can you view the raw Lovelace mode?

You my be able to save that with a copy paste.

But as for the rest, I think you’re screwed.

7

Oh … this sucks.

Out of curiosity. Do you know what caused you being hacked?
Something you yourself downloaded, or a program with an open door? What environment is it. Nas and couple of pc’s?

Best of luck with your situation. Regards.