🚨Plex2Shell Exploit Chain Hits Vulnerable Plex Servers
Plex users: Your media server is under attack
TL;DR
Researchers revealed a new exploit chain, Plex2Shell, that targets vulnerabilities in Plex Media Server. The chain allows attackers to install malware, including cryptominers and residential proxy apps, on devices running outdated versions of Plex. Users should ensure they are running the latest version, 1.43.3.
Researchers have unveiled a new exploit chain dubbed Plex2Shell that targets vulnerabilities in the Plex Media Server, allowing attackers to install malware on devices running outdated versions. This is a major security concern for anyone using Plex, as the exploit chain can lead to the installation of cryptominers and residential proxy software, which can be used to mine cryptocurrency and anonymize internet traffic. The vulnerabilities were fixed in version 1.43.3, released at the start of last month, but attackers are still exploiting older versions. The Plex2Shell exploit chain was developed using AI and completes a series of steps, including unauthenticated SSRF and security token theft. Users should update to the latest version and secure their media servers by restricting access to local networks or using a reverse proxy.
Key Points
Plex2Shell exploit chain targets four vulnerabilities in Plex Media Server, allowing remote code execution.
The latest version of Plex, 1.43.3, fixes the vulnerabilities exploited by Plex2Shell.
Researchers used AI to develop the Plex2Shell exploit chain, completing steps including SSRF and token theft.
Successful attacks install cryptominers and residential proxy software on infected devices.
Plex users should restrict media server access to local networks or use a reverse proxy for added security.
Why It Matters
If you're running an outdated version of Plex, your media server is at risk of being compromised by the Plex2Shell exploit chain. The latest version, 1.43.3, fixes the vulnerabilities, but users must update immediately to avoid becoming a victim. This is especially critical for those using Plex for media streaming and storage, as the malware can be used for cryptocurrency mining and anonymizing internet traffic.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,566 builders reading daily.