Recently fixed Plex Media Server chain ('Plex2Shell') is being exploited to install cryptominers and proxy apps
Researchers reported that a recently disclosed exploit chain dubbed “Plex2Shell,” which leverages multiple recently fixed Plex Media Server vulnerabilities, is being actively scanned and used in the wild to install malware such as cryptominers and residential proxy software. The initial exploit proof‑of‑concept author said they used AI heavily while developing the chain; Plex has released version 1.43.3 and users are urged to update or otherwise restrict Internet exposure.