Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

Overview

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities

SpinGraph analysis pending — check back after processing.