Update now: Hackers are exploiting Plex server vulnerabilities to install malware
Hackers are actively exploiting security vulnerabilities in outdated Plex Media Server installations to deploy cryptocurrency miners and proxy malware. Plex confirms widespread attacks against internet-facing servers, with the flaws allowing remote code execution without authentication. The vulnerabilities were patched in version 1.43.3.10861. Users running older versions are urged to update…
Recent security flaws in Plex Media Server have been exploited by hackers to install malware on unpatched servers. The vulnerabilities, tracked as CVEs, allow an unauthenticated remote attacker to execute code with the privileges of the Plex Media Server process. This was first publicly disclosed on October 16, and attackers have been actively exploiting it ever since.
Compromised servers have been used to run cryptocurrency miners and proxy software, routing other people's traffic through the victim's internet connection. If you haven't updated your Plex Media Server to version 1.43.3.10861 or later, your server may already be compromised.
Written by urgent.news from TechSpot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
