Apps with millions of Google Play downloads covertly mine cryptocurrency
4 stars based on
67 reviews
The latest case involves a manipulated copy of a popular radio application. The original app has already been downloaded millions of times from the Google Play Store. Attackers are aiming to exploit this popularity to distribute their own app as much as possible. They have begun circulating a trojanised copy of TuneIn Radio Pro and are misusing infected mobile phones as cash collectors for the cryptocurrency Dogecoin.
One of the effects of how to mine dogecoin on android is that they physically damage the devices! The popularity of digital currencies is on the increase, as is their attractiveness to malware authors. Until recently, attackers in the mobile sector have been concentrating on sending premium rate SMS messages and devoting themselves to data theft. Experts at G Data SecurityLabs had already predicted that digital currencies would start to be targeted by criminals in the H2 Mobile MalwareReport.
Now they have found evidence that cyber thieves are exploiting unwitting users and their smartphones in the name of cryptocurrency: Introduced by a member of BitcoinTalk and thought to be a joke alternative to Bitcoin, the cryptocurrency Dogecoin has become something of a sensation since early December In only its first eleven weeks, Doge has now become the fifth largest cryptocurrency, with market capitalisation of over USD 52 million.
At first sight there is no obvious difference to the user between the original app and the manipulated copy in terms of look and functionality. The so-called miner, which creates units of a digital currency through computations, is packed into a manipulated APK file as an add-on function.
A digital miner can be thought of as with actual mining: A look at the software code for the malicious app shows that the methods the attackers are using are ingenious. On the one hand, they encrypt the malware code, which makes it hard for malware analysts to find.
On the other, they are producing intelligent code: When the malicious app is first launched, a service called "Google Service" is initialised. After five seconds, and thereafter every twenty minutes, this checks how to mine dogecoin on android the user is actively using the device. If the device how to mine dogecoin on android free — not in use — the malicious app starts to "mine" Dogecoins for the attacker. How to mine dogecoin on android far the attacker, whose Dogecoin wallet address can how to mine dogecoin on android derived from the source code, has already carried out operations involving 1, Dogecoins.
This sum was raised in just three days. Even though this only sounds like a small amount, one must not lose sight of the fact that the attacker gets this without actually doing anything and that this amount will continue to increase. The more users install his malicious app and the longer it remains on the devices, the faster the amount will increase.
Any increase in the Dogecoin exchange rate could also rapidly improve the yield. Of course, the performance is subject to fluctuations in the exchange rate for cryptocurrencies. Since the launch of Dogecoin, exchange rates for the currency have increased significantly, peaking in early February.
Events surrounding the shutdown of the MtGox platformfor example, led to a drop in the rate, although it was already at a high. The damage that the app can do is diverse. In particular, the high load on the CPU or indeed on multiple CPUs, which varies from device to device, can cause excessive wear and potentially cause the mobile device to how to mine dogecoin on android sooner. This damage is irreparable and will very probably be a mystery to the user, not to mention more how to mine dogecoin on android annoying.
Furthermore the malicious app generates data traffic. Even though this turns out to be small according to the current analysis, it can give rise to additional costs for users on mobile tariffs that do not have unlimited data volumes. Yet even this expenditure will probably go unnoticed by the user. The only clues that might quickly raise a user's suspicions are the increased battery usage and the heat from the mobile phone, due to the constant high load at times when the user is not actively using the device.
You can even see the battery consumption in the Android system logs. However, the "Google Service" disguise will very probably come into play again here. Barely a single user will question such battery consumption, assuming it is a system process. Mobile devices are being misused as cash collectors The latest case involves a manipulated copy of a popular radio application. The manipulated app At first sight there is no obvious difference to the user between the original app and the manipulated copy in terms of look and functionality.
The infected user is left with nothing The damage that the app can do is diverse. Malware Mobile Social engineering CyberCrime.
