Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

Threat actors have begun exploiting a chain of four vulnerabilities in Plex Media Server, collectively called Plex2Shell, to install cryptocurrency miners and reverse proxy software. The attacks began one day after proof-of-concept details became public and can enable unauthenticated remote code execution on susceptible instances.