Security · Updated 19 Oct, 11:02 pm IST
Attackers chain Plex2Shell flaws to deploy crypto miners and Linux backdoor
Why it matters for readers: It shows how quickly published exploit code can lead to real attacks that run cryptocurrency miners and backdoors.
- A chain of four vulnerabilities in Plex Media Server is collectively referred to as Plex2Shell.1
- Threat actors have used the Plex2Shell chain to deploy cryptocurrency miners on compromised systems.1
- Attackers also installed a Linux reverse-proxy backdoor as part of the exploitation activity.1
- Active exploitation started roughly one day after a proof-of-concept for the flaws was published.1
- A researcher who uses the online alias boredhackerblog reported details of the exploitation.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started