An update to my Plex2Shell post. QNAP says some customers’ NAS devices appear to have been compromised through Plex Media Server, BleepingComputer reports.
What’s new
QNAP says the four Plex2Shell bugs live in Plex Media Server, not in QTS or QuTS hero. But if Plex on your NAS was reachable from the internet while it was on 1.43.2 or older, updating alone won’t remove anything an attacker already installed.
What to do
- In App Center, update Plex Media Server to 1.43.3.10861 or later.
- Keep QTS/QuTS hero and every installed app up to date too.
- If Plex was exposed (Remote Access on, port 32400 forwarded, or UPnP), follow QNAP’s security notice: check for signs of compromise, do a clean OS reinstall, and reset your Plex and NAS passwords.
- If you don’t need remote access, turn it off. If you do, put it behind a VPN.
My take
Homelabbers, this one’s for us. Patch now, and if your box was exposed, assume the worst and rebuild.
God Bless, and Happy hacking!
