Kaspersky Lab’s researchers have discovered that more and more cyber criminals are turning their attention to malicious software that mines cryptocurrencies at the expense of users’ mobile devices. These criminals are getting greedier and now use not only malware, but also risk tools, hiding mining capacities in popular football and VPN applications to profit from hundreds of thousands of victims without their knowledge.

 

When a computer show signs of slowing down, many tend to blame viruses. But in the case of smartphones — sluggishness, overheating, or short battery life are usually put down to age. Time to buy a new one, people say. In fact, there is a chance that the problem may lie elsewhere — hidden mining, to be precise.

 

When it comes to mining, computing power matters. Of course, in terms of performance, mobile devices cannot hope to compete with desktop computers armed with the latest graphics cards. But in the eyes of cybercriminals, the sheer number of devices makes up for their lack of power. For those accustomed to feeding off other people’s processing power, the millions of devices out there present an opportunity too juicy to ignore.

 

It’s actually alarmingly simple to infect a smartphone or tablet with a hidden miner. There’s no need for the device owner to knowingly install a miner or download an app from a dubious source. Hidden miners can be picked up by downloading and running seemingly innocuous apps available on the official Google Play store.

 

Miners on Google Play
Typical miners pretending to be handy tools or games don’t perform as described — instead, they show ads and covertly mine for cryptocurrency. But Google Play and other official stores keep out such fakes or, if they do manage to sneak in, quickly find and remove them. Therefore, malicious apps of this sort are distributed mainly through forums and nonofficial stores. The problem for cybercriminals is that too few people download anything from such resources.

 

But they found a way around that particular problem: If an app actually does what is promised in its description, and the malware is neatly disguised, it may slip through. That’s already happened — an attempt to create a smartphone-based botnet bypassed the safeguards on Google Play and a number of other app stores. Kaspersky Lab experts recently found several other specimens as well, this time with built-in miners.

 

The most popular apps we found of this type were soccer-related: a family of apps with names including PlacarTV (placar means score in Portuguese), one of which had been downloaded more than 100,000 times. It contained the Coinhive miner, which mined Monero coins while users streamed games. It’s a clever ruse, and not that easy to spot: Your mind is on the match, and watching videos heats up the phone and drains the battery anyway, just like the miner does, so you’ll have no reason to be suspicious.

 

Our experts also found a miner in a free VPN app called Vilny.net. This malware’s trick was to keep tabs on the phone’s temperature and battery. It then suspended mining as needed to avoid overheating or draining the device and attracting the owner’s attention.

 

A more detailed and technical post on this miner is available on Securelist.

 

Kaspersky Lab has alerted Google about these apps, and the soccer-related ones have been removed from the Google Play store — Vilny.net is still available in the store, though. What’s more, there is no guarantee that some other apps with hidden miners won’t sneak in there in the future. So staying safe from them is up to users.

 

“Our findings show that authors of malicious miners are expanding their resources and developing their tactics and approach to perform more effective crypto-currency mining. They are now using legitimate thematic applications with mining capacities to feed their greed. As such, they are able to capitalize on each user twice – firstly via an ad display, and secondly via discreet crypto-mining,” said Roman Unuchek, security researcher at
Kaspersky Lab.

 

How to guard against hidden miners on Android

  • If your smartphone is behaving oddly, don’t ignore it. If it heats up quickly and loses power for no apparent reason, it might be infected. You can find out if an app has suddenly started eating too much battery with a special app such as Kaspersky Battery Life (available from Google Play for free).
  • When looking for new apps, take the developers of those apps into account. Software from reputable developers is far less likely to contain infections.
  • Disable the ability to install applications from sources other than official app stores
  • Keep the OS version of your device up to date in order to reduce vulnerabilities in the software and lower the risk of attack

RECOMMENDED ARTICLE FOR TECHWORLD


 
GeForce® Gamers Are Game Ready for Final Fantasy XV! PUBG Now even Faster!
Techworld Date Posted: 1 March 2018 2:55 PM | 631 Views
NVIDIA® has released a new Game Ready Driver for Final Fantasy XV Windows Edition. In addition, it provides a performance boost of up to 7% in PlayerUnknown’s Battlegrounds (PUBG), along with being optimised for.... See More

 
Lenovo™ Sees Intelligence Transforming Everything at MWC 2018, From Devices to Data Center
Techworld Date Posted: 27 February 2018 4:51 PM | 1016 Views
Today, at MWC 2018, Lenovo reinforced its 2018 vision for technology innovations, moving its core strategy to Augmented Intelligence.. See More

 
ASUS Republic of Gamers Announces Strix XG27VQ
Techworld Date Posted: 23 August 2017 1:10 PM | 115 Views
ROG Strix XG27VQ is a Full HD display with an ultrafast 144Hz refresh rate and features ASUS-exclusive Extreme Low Motion Blur and Adaptive-Sync (FreeSyncTM) technologies for gameplay without tearing and stuttering. Its gaming-inspired design.... See More

 
GOC GEC First Time in Thailand: World Record Broken during GALAX Overclocking & eSports Carnival
Techworld Date Posted: 1 December 2017 3:14 PM | 98 Views
It’s a big day for GALAX the past weekend. The GALAX 9th Overclocking & eSports Carnival were concluded with success last Saturday.. See More

 
NVIDIA and BINUS University Collaborate on First AI R and D Centre in Indonesia
Techworld Date Posted: 29 August 2017 4:58 PM | 72 Views
NVIDIA today announced a collaboration with BINUS University and Kinetica to establish the first artificial intelligence (AI) research and development (R&D) centre in Indonesia. Located at the university's Anggrek Campus, the centre will support BINUS.... See More

 
LG OLED TV WINS FOURTH CONSECUTIVE CE WEEK TV SHOOTOUT TITLE
Techworld Date Posted: 22 July 2017 2:39 PM | 269 Views
The highly acclaimed LG E7 OLED TV was crowned “2017 King of TV” in the 14thAnnual CE Week TV Shootout™ in a competition amongst six contending flagship 4K Ultra HD TV models during CE.... See More

 
CORSAIR Launches Full Range of Wireless Gaming Peripherals at CES 2018
Techworld Date Posted: 9 January 2018 2:18 PM | 113 Views
CORSAIR®, a world leader in enthusiast memory, PC components, and high-performance gaming hardware,. See More

PCBG Contributing Writer
Buckle Up for This Year’s E-Sports and Gaming Summit
Techworld • By:PCBG Contributing Writer | Date Posted: 26 October 2017 2:36 PM | 162 Views
The E-Sports and Gaming Summit (ESGS) 2017 is bound to grace the SMX Convention Center in Pasay City on October 27-29 (Friday-Sunday) for a no-holds barred gaming extravaganza and introduction of new local and.... See More

 
Get the Best Deals for Your Family This Christmas with the PLDT Christmas 3 Bundle Promo
Techworld Date Posted: 21 December 2017 5:04 PM | 151 Views
It’s the season of gift-giving and PLDT has the perfect present for the digitally savvy and entertainment-loving Filipino families.. See More

Rhea Sanvictores
Earmark That Irresistible Yearn for the Zen
Techworld • By:Rhea Sanvictores | Date Posted: 20 March 2017 2:24 PM | 580 Views
Tech experts and various computer enthusiasts, from what it seems to be an uncontested case, are blown away by AMD’ next-generation processor.. See More


Power by

Download Free AZ | Free Wordpress Themes