A report published by Unit 42 research group has warned users that cryptojacking software infiltrate into devices camouflaged as Adobe Flash updates. The malware then installs an “XMRig cryptocurrency miner” and uses the processing power to mine Monero (XMR) coins.
The malware is particularly hard to detect, since it has copied the pop-up update message from Adobe, and actually installs an update to the software as well. Source