A honeypot caught Plex servers being hacked to mine Monero (boredhackerblog.info)
A blogger's honeypot recorded exploitation of four Plex Media Server CVEs chained into remote code execution. Once outbound traffic was allowed, the box downloaded a Docker file and an UPX-packed xmrig miner.
A later update linked a proxy tool to the Aisuru botnet.
Sign in to save