Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

thehackernews.com Oct 19, 2026

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

Curated by Shubham · TechCapsules · Oct 19, 2026

AI-summarised brief · reviewed before publication

Threat actors began exploiting a chain of four Plex Media Server flaws, dubbed Plex2Shell, to achieve unauthenticated remote code execution shortly after a proof‑of‑concept was released on October 16, 2026. The vulnerabilities, including CVE‑2026‑96651 (CVSS 7.1), were reported to Plex on July 27 and patched in version 1.43.3.10861 on August 3. Within a day of the public disclosure, attackers deployed a cryptocurrency miner payload from IP 217.60.194.116 and a Linux backdoor called “myawesomeproxy,” which functions as a stealthy reverse proxy. The miner runs as “mylovelyminer” and contacts the server ota.proxystream.st, a domain previously linked to the AISURU DDoS and proxyware botnet. Reddit users have reported compromised Plex instances, prompting security experts to urge immediate updates to protect personal media libraries today.

💡 Why It Matters

· By turning widely deployed home media servers into covert crypto‑mining and proxy nodes, attackers can harness massive, unsuspected bandwidth and compute resources, amplifying both financial fraud and downstream botnet threats.

Capsules Cryptocurrency

Read full article on thehackernews.com

Project Eleven and Relm Explore Post-Quantum Risk in Digital Asset Insurance

Project Eleven and Relm Insurance have formed an exploratory partnership to examine how post‑quantum security controls can be integrated into digital asset insurance underwriting. Relm will advise on Project Eleven’s Strongpoint custody platform, focusing on key exposure, signing systems, transaction approvals, migration readiness, and third‑party dependencies. The collaboration aims to determine whether quantum‑ready infrastructure can influence risk assessments and insurance premiums, though any impact will require further evaluation under Relm’s independent underwriting processes.

💡 By linking quantum‑ready custody to insurance risk, the partnership could set a new standard for safeguarding digital assets as quantum threats loom.

eurogamer.net · Oct 14

GTA 6 leaker’s latest video allegedly shows scenes from the final mission,…

Cyberleek, the online persona behind a series of Grand Theft Auto 6 leaks, released what appears to be a final video today, claiming it shows portions of the game’s ending. The leaker stated that a 200‑GB build would be shared only if their memecoin reached a $30 million market cap, a target that has not been met. The new clip, four minutes long, ends with a montage of city flyovers set to Journey’s “Don’t Stop Believin’,” and does not reveal the final cutscene. Cyberleek’s coin has fallen from $7.8 million to $1.2 million, and the leaker has indicated they may cease further releases.

💡 The halt in leaks signals a potential shift in how Rockstar’s upcoming title will be marketed, as fans lose a major source of pre‑launch content. It also underscores the volatility of crypto‑backed leak schemes, which can influence public perception of a game’s hype cycle.

gamesradar.com · Oct 14

First big GTA 6 leak was like having someone “wading through your…

Rockstar Games has faced multiple leaks of GTA 6, including a 25‑minute gameplay clip released last week. Artist Aaron Garbut described the leaks as a breach of privacy, comparing them to “wading through your dirty washing.” The first major leak in 2022 triggered intense emotional distress among developers. Despite legal action, leaks continue, notably a cryptocurrency‑fueled attempt by “Cyberleek” that failed after a meme‑coin collapse. Rockstar remains focused on the November 19 launch, while hinting at future efficiencies for upcoming titles.

💡 The persistent leaks expose vulnerabilities in Rockstar’s security protocols, risking intellectual property and fan trust. They also underscore the growing intersection of gaming and cryptocurrency, illustrating how digital currencies can fuel illicit content distribution.

thequantuminsider.com · Oct 13

Coinbase Urges Early Work on Bitcoin’s Post-Quantum Transition

Coinbase urged the Bitcoin ecosystem to begin early work on a quantum‑resistant transition, warning that updating network rules and moving funds could take years. In a blog post, the exchange, which custodies roughly 5 % of all Bitcoin, called for a thorough evaluation of signature schemes that balance security, transaction costs, wallet usability and institutional custody needs. It emphasized that technical development must run alongside debates on how to handle dormant or inaccessible coins, so those discussions do not stall protective measures. Coinbase is engaging developers, researchers, and the Bitcoin Security Consortium, and is contributing engineering resources to open‑source projects. The firm highlighted proposals such as P2MR (BIP‑360) and P2TRv2, stressing the need for flexible designs that conceal public keys, limit quantum attack vectors, and fit Bitcoin’s limited block space and verification constraints.

💡 A premature quantum breakthrough could expose billions in Bitcoin, and Coinbase’s push for coordinated, multiyear preparation aims to safeguard the network before the threat becomes actionable.

ign.com · Oct 13

GTA 6 Fans Celebrate as Cyberleek Cryptocurrency Crashes Hard

GTA 6 fans celebrated yesterday after the Cyberleek memecoin, used by an alleged leaker to fund a series of purported gameplay leaks, crashed to a $1.7 million market cap, far below its recent high of $7.8 million. The scheme tied incremental market‑cap milestones—ranging from $5 million to a $30 million target—to the release of unauthorized footage, including clips that allegedly showed characters Jason and Lucia naked and a 24‑minute video with first‑person perspective. Earlier this week the leaker claimed to possess a 200‑GB build of the unreleased game and threatened daily leaks unless the crypto goals were met. Analysis of blockchain data suggests the leaker cashed out roughly $270,000 in August. The crash reduces chances of a full dump for the community now.

💡 The token’s collapse strips the extortionist of financial leverage, forcing Rockstar to confront the leak threat without paying ransom.

gizmodo.com · Oct 12

XRP Bug Could Have Let Hackers Print Billions in Crypto Out of…

The XRP Ledger fixed a critical integer‑overflow bug that could have allowed attackers to mint counterfeit XRP by exploiting the payment engine’s 64‑bit math without overflow checks. The flaw, present since 2015, would let a single transaction consume many offers, wrap the total amount, and pay offer owners in full while charging the buyer almost nothing. Researcher Cayden Liao reported the issue on September 22, prompting RippleX to test it and release a patch in xrpld 3.4.1 on September 25. The update also addressed a separate, less severe Batch feature bug. No evidence of exploitation on the public network has been found.

💡 The fix protects XRP’s fixed supply, preventing a potential $88 billion‑valued currency from being inflated. It underscores the importance of continuous security auditing in blockchain systems.