Fake cryptomining apps, some found on the Play Store, scam $350,000 from users

midian182

Posts: 7,077   +62
Staff member
Why it matters: Although cryptocurrency such as Bitcoin has lost around half its value in the last three months, people still want to get in on what can be a lucrative industry, and criminals are taking advantage. A security company has discovered that over 170 Android apps, some available on the Google Play store, have been scamming more than 93,000 crypto fans.

Security researchers at the Lookout Threat Lab discovered that the apps, 25 of which were on Google Play, managed to evade detection because they didn’t do anything malicious. The problem was that they didn’t do anything at all.

The apps, classified into families called BitScam and CloudScam, claimed to provide cloud-based cryptocurrency mining services that involved pooling the spare power of users’ handsets, with the profits shared out between everyone. The majority of the apps weren’t free and charged extra fees for subscriptions and upgrades that ranged from $12.99 to $259.99—crypto such as Bitcoin and Ethereum was accepted as payment. But researchers found that no actual mining was taking place.

Users didn’t know the apps were scams as they were not allowed to make withdrawals until a minimum balance had been reached. But even when they did hit that figure, trying to remove funds would only show an error message.

Threat labs writes that the creators made $300,000 from selling the apps and an additional $50,000 in crypto from victims paying for fake upgrades and services. It also notes that the apps were so unsophisticated that they could have been made by someone with no programming experience.

While Google has removed the scam apps from its store, dozens more from third-party stores remain in circulation—so, as always, be careful when sideloading.

Image credit: LightField Studios

Permalink to story.

 

m4a4

Posts: 2,498   +2,895
TechSpot Elite
Anyone with a base understanding of crypto mining would know that an app for phone mining is a scam. Phones don't have the power to do any reasonable mining, would just be a waste of battery. But ignorant people would regrettably fall for it.

At best, is a fun little hobby for powerusers to manually setup on the side with older phones...
 

captaincranky

Posts: 17,199   +5,943
I though all crypto was a scam anyway. :confused:

Must be my age. My tired old brain simply can't grasp the concept of, "vapor money".
 

NightAntilli

Posts: 757   +952
I though all crypto was a scam anyway. :confused:

Must be my age. My tired old brain simply can't grasp the concept of, "vapor money".
Crypto is "vapor money" in as much as e-mail is "vapor letters", YouTube is "vapor videos", Spotify is "vapor music" and the internet is "vapor information".
 

captaincranky

Posts: 17,199   +5,943
Crypto is "vapor money" in as much as e-mail is "vapor letters", YouTube is "vapor videos", Spotify is "vapor music" and the internet is "vapor information".
You forgot Facebook, "vapor friendships", and, "vapor news". Just make sure you leave enough data breadcrumbs behind when you go, so the info vultures can pick your carcass clean.

There are such a thing as screen captures, which you can use to turn your "vapor mail", into something of substance.