Comment on Plex vulnerabilities being exploited in the wild to drop a cryptominer

• Gwaer@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  I run plex on proxmox. When I woke up I noticed my proxmox server was using a lot more cpu than usual.

  Then, plex was using all the resources it was provisioned for. So I checked out what was running and it was a weird process. I tracked down some logs and found the intrusion. IPs related to it etc. but I just blew up the lxc. Saved a copy of the malicious programs and the logs to dig into. Spun up a new plex from the previous days backup.

  original

  • ripcord@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    Did you reset your Plex admin keys?

    original

    • Gwaer@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      Yeah, in the logs I saw they seemed to ett my keys so I reset everything

      original

      • keyez@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

        What are admin keys that you’re referring to?

        original

        • -> View More Comments