Security· ★★· bearish·

Hackers exploit Plex flaw to mine Monero on victims' servers

  • —Public exploit was weaponized in under 24 hours
  • —Attackers also installed a proxy to rent out victims' IPs
  • —Miner persists in the codecs folder and reruns on transcoding
  • —Patch shipped September 23; researcher bounty was $500
Why it matters: Anyone running an exposed, outdated Plex server should update to 1.43.3.10861 immediately or risk silent Monero mining.
#XMR
Source: Livecoins
More on this
Security · Oct 9
Attackers exploit AhsayCBS flaws to hide XMRig miner as Microsoft Edge
 Security · Sep 17
Hackers demand $3 million in Monero from Revolut over client data
 Security · Oct 13
NEAR Intents Says Attacker Returned Part of $3.8M Exploit in Monero