The update got released over 2 months ago. So sensible admins should not be getting hit by this.

Also I use Jellyfin btw.

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 2 weeks ago (5 children)

How did you detect and remove it

  • source
  • parent
  • hideshow 5 child comments
  • [–] 2 points 2 weeks ago (4 children)

    I run plex on proxmox. When I woke up I noticed my proxmox server was using a lot more cpu than usual.

    Then, plex was using all the resources it was provisioned for. So I checked out what was running and it was a weird process. I tracked down some logs and found the intrusion. IPs related to it etc. but I just blew up the lxc. Saved a copy of the malicious programs and the logs to dig into. Spun up a new plex from the previous days backup.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 2 weeks ago (3 children)

    Did you reset your Plex admin keys?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 2 weeks ago* (2 children)

    Yeah, in the logs I saw they seemed to get my keys so I reset everything

  • source
  • parent
  • hideshow 2 child comments