Plex2Shell Vulnerabilities Exploited for Crypto Mining and Proxy Backdoor Installation

Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, named Plex2Shell, to deploy cryptocurrency miners and a Linux reverse proxy backdoor. The vulnerabilities were actively exploited within 24 hours of a proof-of-concept release.

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public.

According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell.

The vulnerabilities

Read original article