Microsoft has removed the apps from its store.

SET discovered that add-ons for Kodi were part of a cryptojacking campaign extending back to at least December 2017.

The zero day is exploitable through the way the app's Windows client manages a Unicode character that reverses the direction of text. A JavaScript file disguised as an image file is used to deploy malware.

A third-party plugin co-opted sites, including ones belonging to the U.S. federal courts and D.C.'s public transit system, to mine Monero.

Smominru uses EternalBlue, a Windows exploit developed by the NSA and leaked by the hacking group Shadow Brokers, to spread across computers.

The nature of cryptocurrency-driven crime is changing.