Comment on Plex vulnerabilities being exploited in the wild to drop a cryptominer
ripcord@lemmy.world 4 hours agoHow did you detect and remove it
Comment on Plex vulnerabilities being exploited in the wild to drop a cryptominer
ripcord@lemmy.world 4 hours agoHow did you detect and remove it
Gwaer@lemmy.world 2 hours ago
I run plex on proxmox. When I woke up I noticed my proxmox server was using a lot more cpu than usual.
Then, plex was using all the resources it was provisioned for. So I checked out what was running and it was a weird process. I tracked down some logs and found the intrusion. IPs related to it etc. but I just blew up the lxc. Saved a copy of the malicious programs and the logs to dig into. Spun up a new plex from the previous days backup.
ripcord@lemmy.world 2 hours ago
Did you reset your Plex admin keys?
Gwaer@lemmy.world 2 hours ago
Yeah, in the logs I saw they seemed to ett my keys so I reset everything