IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

False crypto-mining apps plague Google Play

Apps deceive users into clicking on ads or buying non-existent mining subscriptions

Abstract image of a bitcoin token inside some rocks to represent cryptocurrency mining

Google has removed eight apps from its app store that claimed to be mining apps for cryptocurrency.

Researchers at Trend Micro said they found the fake apps masquerading as cryptocurrency cloud-mining applications. Users were fooled into believing the apps would earn them cryptocurrency by investing money into a cloud-mining operation. 

Upon further investigation, researchers found that these malicious apps only tricked victims into watching ads, paying for subscription services, and paying for increased mining capabilities with nothing in return. 

The apps removed from the store are BitFunds – Crypto Cloud Mining, Bitcoin Miner – Cloud Mining, Bitcoin (BTC) – Pool Mining Cloud Wallet, Crypto Holic – Bitcoin Cloud Mining, Daily Bitcoin Rewards – Cloud Based Mining System

Bitcoin 2021, MineBit Pro - Crypto Cloud Mining & BTC miner, and Ethereum (ETH) - Pool Mining Cloud.

While most were free to download,  Crypto Holic – Bitcoin Cloud Mining cost $12.99 to download and Daily Bitcoin Rewards – Cloud Based Mining System cost $5.99. Some of the apps have even been downloaded more than 100,000 times. Researchers warned that over 120 fake cryptocurrency mining apps are still available online.

Trend Micro’s researchers’ analysis found these apps did not have any cryptocurrency-mining behavior. 

“The fake mining activity on the apps’ user interface (UI) is carried out via a local mining simulation module that includes a counter and some random functions,” said researchers.

Despite lacking mining functionality, some apps prompted users to pay $14.99 to $189.99 via in-app billing systems for increased cryptocurrency-mining capabilities.

“The app called Daily Bitcoin Rewards – Cloud Based Mining System prompts its users to upgrade their cryptomining capacity by “buying” their favorite mining machines to earn more coins at a faster rate,” said researchers.

One app appeared to cover its tracks by stating it was a game that does not have any cryptocurrency-mining functionality in its terms of use.

“If users relied solely on how the application’s UI is configured and designed and didn’t read the app’s terms of use, they may have used it and made in-app purchases without knowing that it’s just a game,” said researchers.

Two other fake crypto apps pestered users by prompting them to click on ads during fraudulent crypto-mining activities to prove they aren’t robots. Users are informed they can start mining after viewing in-app video ads.

The apps also prompt users to invite several friends to download the app to unlock the withdrawal interface.

“However, even after users are able to invite friends and unlock the withdrawal interface, they wouldn’t be able to withdraw cryptocurrency from the app as it is always in a waiting state,” researchers warned.

Researchers said users could spot fake apps by carefully reading the app’s reviews and entering an invalid or wrong cryptocurrency wallet address.

“Confirm if there is a withdrawal fee. The transfer of cryptocurrency requires a handling fee, which is relatively high compared to what is typically made from cloud mining. Hence, free withdrawals are very suspicious,” said researchers. 

Featured Resources

The state of Salesforce: Future of business

Three articles that look forward into the changing state of Salesforce and the future of business

Free Download

The mighty struggle to migrate SAP to the cloud may be over

A simplified and unified approach to delivering Enterprise Transformation in the cloud

Free Download

The business value of the transformative mainframe

Modernising on the mainframe

Free Download

The Total Economic Impact™ Of IBM FlashSystem

Cost savings and business benefits enabled by FlashSystem

Free Download

Recommended

Surging inflation is driving people to cryptocurrencies
cryptocurrencies

Surging inflation is driving people to cryptocurrencies

11 Aug 2022
What is zero trust?
network security

What is zero trust?

14 Jul 2022
An analysis of the European cyber threat landscape
Whitepaper

An analysis of the European cyber threat landscape

8 Jul 2022
What is cryptocurrency mining?
cryptocurrencies

What is cryptocurrency mining?

27 May 2022

Most Popular

Why convenience is the biggest threat to your security
Sponsored

Why convenience is the biggest threat to your security

8 Aug 2022
How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

29 Jul 2022
Cyber attack on software supplier causes "major outage" across the NHS
cyber attacks

Cyber attack on software supplier causes "major outage" across the NHS

8 Aug 2022