Attackers are exploiting a chain of vulnerabilities in Plex Media Server to install unauthorized crypto-mining software and a Linux proxy backdoor on vulnerable systems, according to a Techub News brief citing Bitcoinist. The technique, dubbed Plex2Shell, combines four vulnerabilities that can lead to remote code execution under specific conditions. In recent attacks, compromised servers were found running XMRig, a Monero mining program, along with software that can function as a reverse proxy or backdoor. The vulnerabilities were reported earlier this year and patched in Plex Media Server version 1.43.3.10861. Exploitation attempts appeared after proof-of-concept material became public in October. The report advises server operators to verify their installed version, apply vendor updates, and inspect systems for unusual processes or network connections.
Attackers are exploiting a chain of vulnerabilities in Plex Media Server to install unauthorized cryptocurrency mining software and a Linux proxy backdoor on vulnerable systems, according to Bitcoinist, as cited by Techub News.
The technique, known as Plex2Shell, involves four vulnerabilities that can be combined to achieve remote code execution under specific conditions. In recent attacks, the intruders installed XMRig, a Monero mining program, on compromised servers, along with software that can act as a reverse proxy or backdoor.
The vulnerabilities were reported earlier this year and were fixed in Plex Media Server version 1.43.3.10861. Exploitation attempts emerged after proof-of-concept material circulated publicly in October.
For server operators, the report recommends checking the installed version, applying vendor updates, and reviewing systems for unusual processes or network connections.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
