As promised before, here's our final report, detailing the events and measures taken around the security incident and attack on Emby Server installations in May 2023: Emby Malware Incident Report 2023-05.pdf I hope, this will help to address remaining questions. We don't have all answers about origin, background and intentions of the attackers, but we tried to transparently document what we did when and how and why. softworkz