Attackers use Plex2Shell to mine crypto on vulnerable Plex servers
A public proof of concept for four Plex flaws was used within a day to drop XMRig and proxy software on a honeypot.
74
A public proof of concept for four Plex flaws was used within a day to drop XMRig and proxy software on a honeypot.
Four chained bugs give unauthenticated remote code execution; Plex fixed them in 1.43.3.10861 on August 3.
A honeypot saw RCE attempts from three IPs, then a miner and a proxy called myawesomeproxy.
A honeypot saw the public exploit drop an XMRig miner and later proxy software called myawesomeproxy.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 840 readers · 1.1K views · 843 reads · all time 159K views