Researchers find Android apps that covertly mine Dogecoin, one of them with more than a million downloads

March 27, 2014

dogecoin

Two apps in the Play Store, one of them with more than a million downloads, are mining cryptocurrency whenever the device is plugged in for charging.

Identified by the researchers of security firm Trend Micro, the apps are some of the first malware found in the Play Store that uses virtual currency mining to generate profits for its developers. Trend Micro found that the two apps, Songs (1 to 5 million installs) and Prized (10,000 – 50,000 installs) mine Dogecoin or Litecoin, which is later converted into Bitcoin. The apps’ makers cashed in several times, according to the report.

Cryptocurrency mining uses the device’s CPU and GPU to solve complex cryptographic problems. The reward for this energy- and resource-intensive activity is a small cryptocurrency payout, which can later be exchanged for “real” money. Typically, cryptocurrency miners use high-powered custom rigs with multiple GPUs. Mining on less capable computers, such as laptops, tablets, and smartphones, is generally too time consuming to justify the effort. However, if a malware maker is able to harness the power of millions of low-power devices, the returns could be enticing.

“We believe that with thousands of affected devices, cybercriminal accumulated a great deal of Dogecoins,” said Trend Micro’s team, but it’s not clear from the report what “great deal” means. Currently, 1000 Dogecoin can be exchanged for about 60 cents, while 1 Litecoin costs about $15.5. Dogecoin and Litecoin are both variants of Bitcoin, the cryptocurrency that gained worldwide notoriety and made inroads into mainstream acceptance over the past years.

For the unwitting users of the covert mining apps, the negative effects are slow charging speeds, increased bandwidth consumption, and, due to the strain caused by the constant processing, shorter device and battery lifespan.

Trend Micro has reported the two apps to the Play Store team, but as of this writing, they are still available for download.

Comments

  • http://AndroidAuthority.com/ Bogdan Petrovan

    wow

    • MasterMuffin

      So criminal

      • Jayfeather787

        Yet so brilliant.

        • MasterMuffin

          Not a fan of doge memes, eh?

          • Steve Hynes S

            much crime

          • Jayfeather787

            Huh?

          • duck hairs

            Well you kinda screwed up the meme… You were meant to say much “insert relative statement here”

          • K

            *much brilliant

          • MasterMuffin

            What K and duck hairs said :)

    • http://geekinkuwait.blogspot.com/ Abhishek Kumar

      Many rich

    • Luqmaan Mathee

      Very cryptographic

      • Michael

        Such illegal

    • Cal Rankin

      so theft

  • chuckgammin1234

    So, its a great new way of monetization, no advertisements, free games yet the studios are making money, brilliant!

  • Mike – Construction Contractor

    Very Black Hat!

  • rubber chicken

    what a splendid idea i never considered that :))

    • Some Dude

      What’s the name of the apps?

  • bob

    I quite like the idea of selling unused cpu cycles to pay for in app purchases

  • Anthonydotcom

    What was that 2000′s saying; Don’t hate the playa, hate the game.

  • Alex Ohannes

    Both of the apps have been removed.

  • Prakhar Birla

    many cheats, much money
    wow so 404 from play store

  • A_Noid

    Looks like they have both been removed from the play store. NVM, already mentioned.

  • guestminer

    Cryptocurrency miners dont use GPU’s now, its not enought. There are special devices made only for mining…