Plex servers misused for crypto mining

Plex is a media server software that allows users to stream movies, TV shows, and music to devices around the home. However, hackers have discovered a way to exploit these servers for cryptocurrency mining, which involves using a device's computing power to verify transactions on a blockchain network.

Hackers divert internet connections

In addition to cryptocurrency mining, hackers have also found a way to redirect internet traffic through compromised Plex servers. This can be used to mask the origin of online activity or to route data through unintended paths, potentially violating user privacy or engaging in other malicious activities.

A fix has been available since August

A security patch to address these vulnerabilities was released in August of this year. This update would prevent unauthorized access and stop the misuse of Plex servers for mining and traffic diversion, ensuring the software remains secure for its intended use.

Nearly 49,000 servers remain exposed

Despite the availability of the fix, nearly 49,000 Plex servers are still vulnerable to exploitation. This highlights a common issue in cybersecurity, where security updates are not always promptly applied by users, leaving systems open to potential attacks.