- Multiple Kodi Add-Ons with Cryptocurrency Malware have been spotted by security research firm ESET affecting Windows and Linux users.
- The affected repositories include Gaia, Bubbles, and XvBMC.
- The malware hijacks a system’s resources to mine cryptocurrency for the malware creators.
The next time you download a Kodi add-on, you need to be extra careful about malicious code. Three repositories have been affected by cryptocurrency malware with multiple add-ons being added to them. Windows and Linux users can easily be affected if they download unsafe add-ons from the repositories.
Security firm ESET was the first to spot the malware-affected Kodi add-ons available in Gaia, Bubbles, and XvBMC repositories. Installing the affected add-ons causes an additional add-on to be downloaded on Windows and Linux systems and installs a coin miner. The coin miners are capable of hijacking system resources for the malware creators and the cryptocurrency is transferred to private wallets of the attackers. These miners can cause high CPU usage and can potentially slow down your computer. Mining is a very hardware intensive task and it can definitely drain a decent bit of electricity.
According to ESET, the mining operation dates all the way back to December 2017. The Bubbles repository was affected and attackers managed to mine 62 Monero coins which were valued at $7,000 at the time. The number of affected systems is currently 4,700 and it is likely that similar malware attacks will take place in the future.
The three repositories that were affected are non-functional currently as they were taken down due to copyright violations. Kodi add-on developers are facing legal action and many add-on developers and IPTV sellers are ceasing all activity to prevent legal pressure. If you are someone who uses Kodi, it is recommended to run a thorough scan using an anti-virus software to detect any infected add-ons you may have installed.
If you want to continue using Kodi, you can check out our compilation of add-ons that are safe and available for unlimited streaming on any compatible platform.