Researchers find Android apps that covertly mine Dogecoin, one of them with more than a million downloads

March 27, 2014

    dogecoin

    Two apps in the Play Store, one of them with more than a million downloads, are mining cryptocurrency whenever the device is plugged in for charging.

    Identified by the researchers of security firm Trend Micro, the apps are some of the first malware found in the Play Store that uses virtual currency mining to generate profits for its developers. Trend Micro found that the two apps, Songs (1 to 5 million installs) and Prized (10,000 – 50,000 installs) mine Dogecoin or Litecoin, which is later converted into Bitcoin. The apps’ makers cashed in several times, according to the report.

    Cryptocurrency mining uses the device’s CPU and GPU to solve complex cryptographic problems. The reward for this energy- and resource-intensive activity is a small cryptocurrency payout, which can later be exchanged for “real” money. Typically, cryptocurrency miners use high-powered custom rigs with multiple GPUs. Mining on less capable computers, such as laptops, tablets, and smartphones, is generally too time consuming to justify the effort. However, if a malware maker is able to harness the power of millions of low-power devices, the returns could be enticing.

    “We believe that with thousands of affected devices, cybercriminal accumulated a great deal of Dogecoins,” said Trend Micro’s team, but it’s not clear from the report what “great deal” means. Currently, 1000 Dogecoin can be exchanged for about 60 cents, while 1 Litecoin costs about $15.5. Dogecoin and Litecoin are both variants of Bitcoin, the cryptocurrency that gained worldwide notoriety and made inroads into mainstream acceptance over the past years.

    For the unwitting users of the covert mining apps, the negative effects are slow charging speeds, increased bandwidth consumption, and, due to the strain caused by the constant processing, shorter device and battery lifespan.

    Trend Micro has reported the two apps to the Play Store team, but as of this writing, they are still available for download.

    Comments

    • http://AndroidAuthority.com/ Bogdan Petrovan

      wow

      • MasterMuffin

        So criminal

        • Jayfeather787

          Yet so brilliant.

          • MasterMuffin

            Not a fan of doge memes, eh?

            • Steve Hynes S

              much crime

            • Jayfeather787

              Huh?

            • duck hairs

              Well you kinda screwed up the meme… You were meant to say much “insert relative statement here”

            • K

              *much brilliant

            • MasterMuffin

              What K and duck hairs said :)

      • http://geekinkuwait.blogspot.com/ Abhishek Kumar

        Many rich

      • Luqmaan Mathee

        Very cryptographic

        • Michael

          Such illegal

      • Cal Rankin

        so theft

    • chuckgammin1234

      So, its a great new way of monetization, no advertisements, free games yet the studios are making money, brilliant!

    • Mike – Construction Contractor

      Very Black Hat!

    • rubber chicken

      what a splendid idea i never considered that :))

      • Some Dude

        What’s the name of the apps?

    • bob

      I quite like the idea of selling unused cpu cycles to pay for in app purchases

    • Anthonydotcom

      What was that 2000′s saying; Don’t hate the playa, hate the game.

    • Alex Ohannes

      Both of the apps have been removed.

    • Prakhar Birla

      many cheats, much money
      wow so 404 from play store

    • A_Noid

      Looks like they have both been removed from the play store. NVM, already mentioned.

    • guestminer

      Cryptocurrency miners dont use GPU’s now, its not enought. There are special devices made only for mining…

    Popular

    Latest