NEWS · COMPANIES · #2227
Recently fixed Plex Media Server chain ('Plex2Shell') is being exploited to install cryptominers and proxy apps
Researchers reported that a recently disclosed exploit chain dubbed “Plex2Shell,” which leverages multiple recently fixed Plex Media Server vulnerabilities, is being actively scanned and used in the wild to install malware such as cryptominers and residential proxy software. The initial exploit proof‑of‑concept author said they used AI heavily while developing the chain; Plex has released version 1.43.3 and users are urged to update or otherwise restrict Internet exposure.
KEY POINTS
- Researchers reported that a recently disclosed exploit chain dubbed “Plex2Shell,” which leverages multiple recently fixed Plex Media Server vulnerabilities, is being actively scanned and used in the wild to install malware such as cryptominers and residential proxy software.
- The initial exploit proof‑of‑concept author said they used AI heavily while developing the chain; Plex has released version 1.43.3 and users are urged to update or otherwise restrict Internet exposure.
- Active exploitation turns exposed home media servers into malware hosts and residential proxies, increasing privacy and corporate‑access risk, and the reported use of LLMs accelerated the exploit development.
WHY IT MATTERS
Active exploitation turns exposed home media servers into malware hosts and residential proxies, increasing privacy and corporate‑access risk, and the reported use of LLMs accelerated the exploit development.