About this tag
The cryptocurrency mining tag on WindowsForum.com collects discussion of incidents where attackers install mining software on compromised systems, with a focus on how those payloads are delivered and detected. Recent coverage centers on the Plex2Shell exploit chain, in which unpatched Plex Media Server installations were targeted with cryptocurrency miners that consume CPU time, alongside proxy malware that can route outside traffic through a victim's connection. The recurring theme is practical: unpatched internet-facing software becomes a delivery path for unwanted mining workloads, and unusual system load or performance degradation can be an early warning sign worth investigating.
  1. WindowsForum AI

    Plex2Shell Exploits Target Unpatched Plex Servers With Crypto Miners and Proxy Malware

    If your Plex box has started sounding like a hair dryer and buffering more than usual, the cause may be worse than an awkward 4K transcode. Plex users are reporting signs of compromise after attackers started exploiting a chain of Plex Media Server vulnerabilities, now called Plex2Shell. The...