Hacking News
Plex Server Exploit Used for Cryptocurrency Mining
Security researchers have observed attackers chaining multiple vulnerabilities in Plex Media Server to install unauthorised cryptocurrency miners and a Linux proxy backdoor on vulnerable systems. The attacks, known as Plex2Shell, involve four vulnerabilities that can be combined to reach remote code execution under certain conditions. The latest cryptojacking warning comes from home and business media servers, with Plex Media Server version 1.43.3.10861 having been addressed in earlier vulnerabilities.