Plex vulnerabilities being exploited in the wild to drop a cryptominer

Comments

• heartSagan5@lemmy.zip ⁨1⁩ ⁨hour⁩ ago

  Stop with the passive aggressive “btw,” please. It was used by gloating Arch users, and it’s not a great look.

  source
• ExcessShiv@lemmy.dbzer0.com ⁨8⁩ ⁨hours⁩ ago

  Also I use Jellyfin btw.

  Oh god, its the new Arch isn’t it…

  source

  • Seralth@piefed.seralth.com ⁨5⁩ ⁨hours⁩ ago

    No nix is the new arch.

    Lol

    source
  • Psythik@lemmy.world ⁨4⁩ ⁨hours⁩ ago

    IDK why everyone here is in love with Jellyfin when we have Stremio/Nuvio. Jellyfin is a lot of work; with Nuvio all you do is browse like Netflix, and stream. No existing media library requires.

    source

    • curbstickle_lw@lemmy.world ⁨3⁩ ⁨hours⁩ ago

      Because a lot of us watch things that cant be found easily, or home movies, or prefer to have it readily available at any time.

      There are many reasons. Dont assume your use case is the only one.

      source
    • electric_nan@lemmy.ml ⁨3⁩ ⁨hours⁩ ago

      I’m stoked on my Jellyfin setup, but I’ll check on Stremio again in case I want to recommend it to anyone. Never heard of Nuvio, but at a glance it seems like you have to connect it to a media library.

      source

      • -> View More Comments
  • moodwrench@lemmy.world ⁨4⁩ ⁨hours⁩ ago

    Everyone talks about Jellyfin, but I just switched to Emby and I couldn’t be happier (no connect cloud stuff). Can someone please let me know why and how I just made the worst decision of my life please.

    source

    • pory@lemmy.world ⁨4⁩ ⁨hours⁩ ago

      The main reason is that if you switch from Plex to Emby you’re going from paid licenseware (fully enshittified) to paid licenseware (not fully enshittified yet). It’s like when everyone finally dropped Skype and moved to… Discord. Which hey it’s closed source and owned by venture capital, but it doesn’t suck yet!!! And now in 2026, Discord is what Discord is.

      source

      • -> View More Comments
  • peppericecream@lemmy.dbzer0.com ⁨7⁩ ⁨hours⁩ ago

    I think it’s not a widely used phrase yet

    source

    • ripcord@lemmy.world ⁨3⁩ ⁨hours⁩ ago

      It definitely is in this community

      source
    • DaveyRocket@lemmy.world ⁨3⁩ ⁨hours⁩ ago

      Idk, I think I heard peppe rice cream say it…

      source
  • keithnator3000@lemmy.world ⁨6⁩ ⁨hours⁩ ago

    I have everything locally and watch on VLC fwiw /s

    source

    • DarkSirrush@piefed.ca ⁨6⁩ ⁨hours⁩ ago

      Now that is the arch of the self hosted streaming community.

      source

      • -> View More Comments
  • Auli@lemmy.ca ⁨7⁩ ⁨hours⁩ ago

    Nope

    source
• flandish@lemmy.world ⁨1⁩ ⁨hour⁩ ago

  i run mine through wireguard, but also think i do have its port open to the wider web using the plex signon they push. i’m prob fucked huh?

  source

  • heartSagan5@lemmy.zip ⁨1⁩ ⁨hour⁩ ago

    It’s always amazing at how many crawlers/pentest kits are hitting my well-known ports.

    source
• richardisaguy@lemmy.world ⁨2⁩ ⁨hours⁩ ago

  Hackers still doing cryptominers nowadays? C’mon, get with the times, install a LLM model on people’s computers instead.

  source

  • heartSagan5@lemmy.zip ⁨1⁩ ⁨hour⁩ ago

    The cryptomining still potentially pays, the LLMs just cook the user’s hardware.

    source
• i_stole_ur_taco@lemmy.ca ⁨7⁩ ⁨hours⁩ ago

  Sure explains why Plex was so cagey and uninformative when they emailed everyone to update their servers a couple months back. Not so much as a CVE report or change set.

  A vulnerability? No…. 4 of them. And they stack.

  source

  • SirHaxalot@nord.pub ⁨6⁩ ⁨hours⁩ ago

    That kind of is the proper way to handle this. You don’t want to hint bad actors where to look and give people some time to update.

    source
• The_Zen_Cow_Says_Mu@infosec.pub ⁨4⁩ ⁨hours⁩ ago

  If you want to expose plex to the open Internet (not a VPN) Don’t open the plex port to the internet. Turn off the “remote access” setting and run it behind a reverse proxy instead.

  source

  • fonix232@fedia.io ⁨4⁩ ⁨hours⁩ ago

    And if you run a reverse proxy, put crowdsec on it. The free options for filters are pretty well maintained.

    source
• BakedCatboy@lemmy.ml ⁨8⁩ ⁨hours⁩ ago

  As someone who has nearly all internet facing software auto update with watchtower nightly my cortisol is so low

  source
• mlg@lemmy.world ⁨5⁩ ⁨hours⁩ ago

  Also I use Jellyfin btw.

  You shouldn’t be talking with the amount of hilarious CVEs jellyfin has also had lmao

  source

  • non_burglar@lemmy.world ⁨5⁩ ⁨hours⁩ ago

    I don’t understand, though… Your mom has a bunch of unresolved CVEs and we all bang her anyway, so??

    source

    • GreenKnight23@lemmy.world ⁨1⁩ ⁨hour⁩ ago

      Also I use Jellyfin btw.

      You shouldn’t be talking with the amount of hilarious CVEs jellyfin has also had lmao

      I don’t understand, though… Your mom has a bunch of unresolved CVEs and we all bang her anyway, so??

      behold! the jellyfin community in a nutshell.

      1000004739

      source

      • -> View More Comments
    • fonix232@fedia.io ⁨4⁩ ⁨hours⁩ ago

      Hopefully with a firewall

      source
• frongt@lemmy.zip ⁨8⁩ ⁨hours⁩ ago

  I’m guessing this requires it be exposed to the Internet. Please stop exposing services to the Internet.

  source

  • Auli@lemmy.ca ⁨7⁩ ⁨hours⁩ ago

    Kind of defeats the purpose of Plex and Jellyfin.

    source

    • peppericecream@lemmy.dbzer0.com ⁨7⁩ ⁨hours⁩ ago

      *defeats your purpose of Plex and Jellyfin

      I just want a media server. I have no use case to make it available to the public internet.

      source
    • Seralth@piefed.seralth.com ⁨5⁩ ⁨hours⁩ ago

      The only reason to expose it raw to the internet is because your hosting a piracy service.

      You can easily keep everything inside of a wireguard VPN and expose nothing directly.

      source

      • -> View More Comments
  • pHr34kY@lemmy.world ⁨5⁩ ⁨hours⁩ ago

    If you don’t have ports open, you’re not an internet participant. You’re just spectating.

    source
  • sanpo@sopuli.xyz ⁨7⁩ ⁨hours⁩ ago

    That’s pretty much the number one reason people say they won’t move to Jellyfin.

    Even though exposing your shit to Internet is a terrible idea for most people.

    source

    • Auli@lemmy.ca ⁨7⁩ ⁨hours⁩ ago

      I think people over blow how dangerous it is. Or maybe its better most people dont. I don’t know I know the issues and I take measures to mitigate them. Then if someone gets in they would be limited to vlan. And if somebody gets out of that good wasted so much effort for nothing since I have nothing that would be worth that much trouble.

      And before someone says identity pretty sire that has been in so many other leaks overt the years the information is pretty old.

      source

      • -> View More Comments
    • magic_smoke@lemmy.blahaj.zone ⁨7⁩ ⁨hours⁩ ago

      Just throw a wireguard tunnel on your router and call it a day.

      source

      • -> View More Comments
• Decronym@lemmy.decronym.xyz [bot] ⁨4⁩ ⁨hours⁩ ago

  Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

  Fewer Letters	More Letters
  CSAM	Child Sexual Abuse Material
  Plex	Brand of media server package
  VPN	Virtual Private Network

  ---

  [Thread #141 for this comm, first seen 19th Oct 2026, 23:00] [FAQ] [Full list] [Contact] [Source code]

  source
• Gwaer@lemmy.world ⁨5⁩ ⁨hours⁩ ago

  I got hit by this a couple days ago.

  source

  • ripcord@lemmy.world ⁨3⁩ ⁨hours⁩ ago

    How did you detect and remove it

    source

    • Gwaer@lemmy.world ⁨1⁩ ⁨hour⁩ ago

      I run plex on proxmox. When I woke up I noticed my proxmox server was using a lot more cpu than usual.

      Then, plex was using all the resources it was provisioned for. So I checked out what was running and it was a weird process. I tracked down some logs and found the intrusion. IPs related to it etc. but I just blew up the lxc. Saved a copy of the malicious programs and the logs to dig into. Spun up a new plex from the previous days backup.

      source

      • -> View More Comments