False crypto-mining apps plague Google Play

Apps deceive users into clicking on ads or buying non-existent mining subscriptions

Abstract image of a bitcoin token inside some rocks to represent cryptocurrency mining

Google has removed eight apps from its app store that claimed to be mining apps for cryptocurrency.

Researchers at Trend Micro said they found the fake apps masquerading as cryptocurrency cloud-mining applications. Users were fooled into believing the apps would earn them cryptocurrency by investing money into a cloud-mining operation. 

Upon further investigation, researchers found that these malicious apps only tricked victims into watching ads, paying for subscription services, and paying for increased mining capabilities with nothing in return. 

The apps removed from the store are BitFunds – Crypto Cloud Mining, Bitcoin Miner – Cloud Mining, Bitcoin (BTC) – Pool Mining Cloud Wallet, Crypto Holic – Bitcoin Cloud Mining, Daily Bitcoin Rewards – Cloud Based Mining System

Bitcoin 2021, MineBit Pro - Crypto Cloud Mining & BTC miner, and Ethereum (ETH) - Pool Mining Cloud.

While most were free to download,  Crypto Holic – Bitcoin Cloud Mining cost $12.99 to download and Daily Bitcoin Rewards – Cloud Based Mining System cost $5.99. Some of the apps have even been downloaded more than 100,000 times. Researchers warned that over 120 fake cryptocurrency mining apps are still available online.

Trend Micro’s researchers’ analysis found these apps did not have any cryptocurrency-mining behavior. 

“The fake mining activity on the apps’ user interface (UI) is carried out via a local mining simulation module that includes a counter and some random functions,” said researchers.

Despite lacking mining functionality, some apps prompted users to pay $14.99 to $189.99 via in-app billing systems for increased cryptocurrency-mining capabilities.

“The app called Daily Bitcoin Rewards – Cloud Based Mining System prompts its users to upgrade their cryptomining capacity by “buying” their favorite mining machines to earn more coins at a faster rate,” said researchers.

One app appeared to cover its tracks by stating it was a game that does not have any cryptocurrency-mining functionality in its terms of use.

“If users relied solely on how the application’s UI is configured and designed and didn’t read the app’s terms of use, they may have used it and made in-app purchases without knowing that it’s just a game,” said researchers.

Two other fake crypto apps pestered users by prompting them to click on ads during fraudulent crypto-mining activities to prove they aren’t robots. Users are informed they can start mining after viewing in-app video ads.

The apps also prompt users to invite several friends to download the app to unlock the withdrawal interface.

“However, even after users are able to invite friends and unlock the withdrawal interface, they wouldn’t be able to withdraw cryptocurrency from the app as it is always in a waiting state,” researchers warned.

Researchers said users could spot fake apps by carefully reading the app’s reviews and entering an invalid or wrong cryptocurrency wallet address.

“Confirm if there is a withdrawal fee. The transfer of cryptocurrency requires a handling fee, which is relatively high compared to what is typically made from cloud mining. Hence, free withdrawals are very suspicious,” said researchers. 

Featured Resources

The definitive guide to warehouse efficiency

Get your free guide to creating efficiencies in the warehouse

Free download

The total economic impact™ of Datto

Cost savings and business benefits of using Datto Integrated Solutions

Download now

Three-step guide to modern customer experience

Support the critical role CX plays in your business

Free download

Ransomware report

The global state of the channel

Download now

Recommended

Phishing emails target victims with fake vaccine passport offer
cyber crime

Phishing emails target victims with fake vaccine passport offer

21 Sep 2021
IoT devices are more vulnerable than ever
Internet of Things (IoT)

IoT devices are more vulnerable than ever

10 Sep 2021
Defeating ransomware with unified security from WatchGuard
Whitepaper

Defeating ransomware with unified security from WatchGuard

7 Sep 2021
Why retail is a top target for cyber attacks
cyber security

Why retail is a top target for cyber attacks

1 Sep 2021

Most Popular

What are the pros and cons of AI?
machine learning

What are the pros and cons of AI?

8 Sep 2021
The technology powering the future of shopping
Technology

The technology powering the future of shopping

16 Sep 2021
Citrix mulling potential sale after tumultuous 2021
mergers and acquisitions

Citrix mulling potential sale after tumultuous 2021

15 Sep 2021