Hackers exploited 0-day, not 2018 bug, to mass-wipe My Book Live devices