Attackers are exploiting a chain of vulnerabilities in Plex Media Server to install unauthorized cryptocurrency miners and a reverse proxy backdoor on vulnerable systems. This technique, dubbed Plex2Shell, combines four flaws to achieve remote code execution. The attacks install an XMRig miner alongside software functioning as a reverse proxy or backdoor on Linux. The vulnerabilities were patched in Plex Media Server version 1.43.3.10861, but exploitation attempts began after public proof-of-concept material circulated in October. The main risk applies to servers running unpatched, affected software, and an unusually busy server may be the first obvious clue of an infection.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
