• 0 Posts
  • 3 Comments
Joined 2 months ago
cake
Cake day: August 22nd, 2026

help-circle
  • I was also impacted, you need to remove the payload that got dumped:

    Payload: /tmp/.pxb/{curl,wget}, /tmp/.spid

    Two processes named khungtaskd / cron

    They also stole your admin token so go to the Plex UI and log out of all devices for whichever account has ownership of the instance.

    Then you can reclaim ownership and it resets the admin token.

    You should likely be fine, I didn’t have any crypto miners on mine, it was just in a docker instance and didn’t have access outside of it. I would be much more worried if it was a direct install on a main PC.

    Also install watch tower