Manipulated Kodi extensions to mine cryptocurrencies

ESET researchers have discovered several extensions of the Kodi plugin used to distribute cryptocurrency mining malware.

Kodi (former XvBMC) is a media center natively supported in the main platforms that is intended to add third party extensions, being in some of these add-ons where crypto-malware has been included.

The ESET analysis revealed that the malware runs on Windows and Linux systems, for the Monero cryptocurrency (XMR) and that it was distributed from the Bubbles and Gaia plugins repositories.