Security Firm ESET Discovers Kodi Add-Ons with Cryptocurrency Malware

Written by Nitish Singh
Last updated August 17, 2021

The next time you download a Kodi add-on, you need to be extra careful about malicious code. Three repositories have been affected by cryptocurrency malware with multiple add-ons being added to them. Windows and Linux users can easily be affected if they download unsafe add-ons from the repositories.

Security firm ESET was the first to spot the malware-affected Kodi add-ons available in Gaia, Bubbles, and XvBMC repositories. Installing the affected add-ons causes an additional add-on to be downloaded on Windows and Linux systems and installs a coin miner. The coin miners are capable of hijacking system resources for the malware creators and the cryptocurrency is transferred to private wallets of the attackers. These miners can cause high CPU usage and can potentially slow down your computer. Mining is a very hardware intensive task and it can definitely drain a decent bit of electricity.

Kodi Add-Ons Malware

Image Courtesy of ESET

According to ESET, the mining operation dates all the way back to December 2017. The Bubbles repository was affected and attackers managed to mine 62 Monero coins which were valued at $7,000 at the time. The number of affected systems is currently 4,700 and it is likely that similar malware attacks will take place in the future.

The three repositories that were affected are non-functional currently as they were taken down due to copyright violations. Kodi add-on developers are facing legal action and many add-on developers and IPTV sellers are ceasing all activity to prevent legal pressure. If you are someone who uses Kodi, it is recommended to run a thorough scan using an anti-virus software to detect any infected add-ons you may have installed.

If you want to continue using Kodi, you can check out our compilation of add-ons that are safe and available for unlimited streaming on any compatible platform.

What do you think about the malware attack on Kodi add-ons? Let us know in the comments below. Also, to get instant tech updates, follow TechNadu’s Facebook page, and Twitter handle. 

For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: