My account is being hacked, and as far as I can see only the PIN is being changed every time, and some Friends are added to my list.
I’m would like to know:
How could they have gained access and how to stop this from happening in the future
What kind of dangers am I opened to now? Could they have gained access to my home network or the computer I’m using as a server and opened private files?
Is there any way to trace their IPs? I see in my own information the emailadresses used by them, and that the computer systems (Linux and Windows) were using Firefox, which I personally don’t.
Change your Plex account password. It is possible, that your email address and password match some other website you’ve used in the past that has been hacked. Because people tend to use the same email/password combinations, the bad guys take that login information and sweep other popular sites on the internet looking for logins that work.
Changing it to something unique for Plex will put the power back in your hands. Delete the new users and rest comfortably knowing they likely didn’t have access to anything else other than your media to watch.
Also, review which websites you use that use the same login email and passwords, and consider making changes there as well as a precaution.
Dean probably got invited by someone else, rather than hacking you I’d guess, you could contact him using these details https://domainbigdata.com/donkfm.info and see where he got access. Hellkitty1982 seems to be active in /r/plexshares, cadging invites too.
In addition to @AmazingRando24 suggestion, I’d consider changing your remote port (something other than 32400). People routinely scan this port looking for Plex openings. I’ve come across apps that are connected to Plex servers when searching google for plex utilities.
But yea definitely change you password etc first and formost.
Ha quick google search and you found the guy.
This is pretty common, it happened to a friend of mine. Guys acquire login info and sell access like a low rent Netflix.
My guess is that the person using the alias Dean Gilbert was behind the ‘hack’ (can’t really call it this). I also found him before on Google, which shows his emailadress is used on 71 sites, probably for sending out spam: https://domainbigdata.com/nj/rV6YdNj_OfNwGOMZKEgZ_g.
kittyloulou82 probably was added as a joke, as this alias was put on a forum once with the request to add it to a Plex database.
I changed the password and will assume they can’t do much more. Perhaps I’ll change the port too when I get home.
