The Canada Brief

Tech · 12 d ago

Code on a screen, security concept

Hackers exploit Plex server flaws to install malware

The flaws let an unauthenticated attacker run code on a Plex Media Server, and a public proof of concept was released on Oct 16.

What attackers have done

  • Run cryptocurrency miners
  • Route other people's traffic
  • Run unrecognized processes

Hacked servers have been used to run cryptocurrency miners and proxy software that routes strangers' traffic through the owner's connection.

What to do

Servers older than version 1.43.3.10861 are at risk. Update, and turn off remote access if it is not needed.