Security · Updated 20 Oct, 01:09 am IST

Unpatched Plex Media servers exploited to install cryptominers

Why it matters for readers: This shows how unpatched home and server software can be hijacked for cryptomining or proxying traffic.

A researcher says attackers are chaining four recently patched Plex vulnerabilities to hack unpatched servers.2
In-the-wild exploitation was observed that installs a cryptominer on compromised Plex instances.1 2
A honeypot run by a community researcher captured activity and linked it to published CVEs and Plex's September security update.1
Operators may be using residential Plex hosts as proxy hops, increasing the risk beyond simple coin-mining.1

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

19 Oct, 07:06 pm · Hacker News (100+ points)
Plex vulnerabilities being exploited in the wild to drop a cryptominer
20 Oct, 01:09 am · Ars Technica
Recently fixed Plex Media vulnerabilities are being exploited to install malware