Hackers exploit fixed Plex flaws to install malware
Attackers are using recently patched Plex Media Server weaknesses to deploy cryptocurrency miners and proxy apps on compromised machines. A researcher reported the activity.
By Standard Topic. AI-generated from the reporting listed under Coverage. Published . Updated .
This story is no longer being updated. It reflects reporting up to .
What happened
Threat actors are exploiting recently fixed vulnerabilities in the Plex Media Server. When the attacks succeed, they install malware, including cryptominers and residential proxy software. The campaign reportedly began within hours of the flaws being disclosed.
Timeline
- Oct 19, 8:44 AM ET: Plex2Shell exploit chain was reported in use against Plex servers hours after its disclosure, with cryptocurrency miners and proxy software being delivered.
- Oct 19, 3:39 PM ET: A researcher said the recently fixed Plex Media Server vulnerabilities were under active exploitation, with attacks installing malware.
Coverage
- Recently fixed Plex Media vulnerabilities are being exploited to install malware (arstechnica.com)
- Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure (securityweek.com)
More from Technology & AI
- Eight states sue OpenAI, alleging misleading AI safety claims
- OpenAI announces solution to Navier-Stokes math problem
- Datadog bets AI agents can handle testing of AI-written code
- Anthropic and OpenAI sketch wealth-sharing plans before IPOs
- Mamdani administration proposes AI customer service rules
- Florida engineers study how AI behaves in high-risk situations