# ⚠️ Malware Infecting unsecured Node-RED servers
**URL:** https://discourse.nodered.org/t/malware-infecting-unsecured-node-red-servers/3460
**Category:** News
**Created:** [26 September 2018 09:33 UTC](https://discourse.nodered.org/t/malware-infecting-unsecured-node-red-servers/3460 "2018-09-26T09:33:21Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [26 September 2018 09:33 UTC](https://discourse.nodered.org/t/malware-infecting-unsecured-node-red-servers/3460/1 "2018-09-26T09:33:21Z")
There have been a growing number of reports of _unsecured_ instances of Node-RED having a crypto-mining flow automatically deployed on them.
This is a result of exposing Node-RED on the internet without having applied any security - something we strongly advise against.
**If you have been affected, the only safe option is to wipe and reinstall the server/device running Node-RED.**
You _must_ also ensure you properly secure Node-RED. At a bare minimum, you should enable `adminAuth` as described in the [documentation](https://nodered.org/docs/security).
There is more information about best practices when exposing Node-RED on the Internet [here](https://github.com/node-red/cookbook.nodered.org/wiki/How-to-safely-expose-Node-RED-to-the-Internet).
---
### Author:  [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [26 September 2018 09:33 UTC](https://discourse.nodered.org/t/malware-infecting-unsecured-node-red-servers/3460/2 "2018-09-26T09:33:29Z")
---
### Author:  [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [12 March 2019 16:49 UTC](https://discourse.nodered.org/t/malware-infecting-unsecured-node-red-servers/3460/3 "2019-03-12T16:49:52Z")