Gizmodo
Your Plex Server Could Be Mining Crypto for Hackers
Remote code execution is now available on non-updated Plex servers.
Via Gizmodo
·Excerpt

Plex shipped a security update in August that closed a chain of bugs letting anyone who can reach an exposed Plex Media Server run code on it. In one detailed public account, a hobbyist who later stood up a vulnerable server as a honeypot says attackers used that same chain on Saturday to drop a crypto miner and residential proxy software that lets other people route their traffic through a victim’s home internet connection, essentially using it as a VPN…
Courtesy
This story was originally published by Gizmodo. All rights belong to the original publisher.
Read the original on gizmodo.com ↗
