Latest / The Digital Warfare Podcast
EP. 184: Plex2Shell Was Weaponized Almost Immediately Unpatched Servers Are Now Being Hijacked
Summary
Attackers are now exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities that can be combined to achieve unauthenticated remote code execution against exposed vulnerable servers. Public proof-of-concept code was released on October 16, and successful exploitation was observed against a honeypot the following day.
Observed payloads include the XMRig cryptocurrency miner and proxy software capable of using a victim’s internet connection as an external proxy node. Plex had already released security updates and recommends upgrading servers from affected…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.