Update your Plex server now: hackers actively exploiting it to install malware
Hackers are attacking Plex media servers using a four-bug exploit chain. They install cryptominers and spyware on home devices.
Plex Media Server has recently patched vulnerabilities. Hackers are now exploiting them in real attacks.
Researchers set up a test server and saw successful attacks within a day. The hackers use an exploit chain called Plex2Shell to gain full control.
Once in, they install cryptominers. These steal your device's computing power to mine cryptocurrency.
They also install residential proxy software. This lets criminals hide their illegal internet activity through your home network.
To stay safe, update Plex immediately to version 1.43.3. Enable automatic updates if you haven't already.
The safest approach is restricting Plex access to your home network only. This limits remote features.
- 4
- Vulnerabilities patched
- 5
- CVE designations revealed
- 8.6 out of 10
- Highest severity rating
- within a day
- Time to first successful exploit
Why it mattersVulnerable Plex servers can be hijacked to mine cryptocurrency on your hardware. They can also give criminals access to your home network.
AustraliaAny Australian using Plex needs to update now to block active attacks that could turn their media server into a criminal tool.
✓ Claims checked against the source and corrected before publish. checked 2 h ago
Open this story in InSnip →
