Hackers exploit Plex server flaws to install malware

First reported 20 Oct, 21:06 UTCSource: TechSpotLast editorial activity 20 Oct, 21:06 UTCWrite a comment ↓

Networking equipment with connected cables, showcasing modern technology infrastructure. — Illustrative photo.Photo by Vladimir Srajber on Pexels

Plex has confirmed widespread attacks against internet-facing Plex Media Server installations, with attackers exploiting flaws that allow remote code execution without authentication. The company is urging users running older versions to update immediately.

Attackers target outdated server installations

According to the report by TechSpot, Plex has confirmed that attackers are actively exploiting security vulnerabilities in outdated Plex Media Server installations. The flaws permit remote code execution, meaning a person elsewhere can run programs on a machine, and they require no authentication.

The intruders are using these weaknesses to deploy cryptocurrency miners and proxy malware, software designed to damage a system or steal from it.

Fix available in version 1.43.3.10861

The vulnerabilities were patched in version 1.43.3.10861 of Plex Media Server. Users who run older versions are advised to update immediately to close the gap.

Open questions

How many servers have been compromised so far?

What Matters Now

WORLDTECH illustration

Startups & Business

Key facts

Plex confirms widespread attacks against internet-facing servers.
The flaws allow remote code execution without authentication.
The vulnerabilities were patched in version 1.43.3.10861.
Attackers are deploying cryptocurrency miners and proxy malware through outdated installations.
Users running older versions are urged to update immediately.

Sources & evidence

TechSpot Reporting source
Update now: Hackers are exploiting Plex server vulnerabilities to install malware ↗
https://www.techspot.com/downloads/6739-plex-media-app.html