8 Illicit Crypto-Mining Windows Apps Removed From Microsoft Store

- Advertisement -

A number of apps in Microsoft’s app store have been found to be able to illicitly mine cryptocurrency.

The eight apps, discovered by Symantec on Jan. 17, hosted a version of Coinhive, a script for mining the monero cryptocurrency that has proved popular with cyber criminals.

In a blog post on the discovery, Symantec said it had reported the apps to Microsoft, which subsequently took them down. The apps all ran on Windows 10, including Windows 10 S Mode, which restricts app downloads to the Microsoft Store.

Three developers, DigiDream, 1clean and Findoo, reportedly produced all the apps, which covered the areas of computer and battery optimization tutorials, web search, web browsing, and video viewing and download.

Symantec wrote in the post:

“In total, we discovered eight apps from these developers that shared the same risky behavior. After further investigation, we believe that all these apps were likely developed by the same person or group.”

8 Illicit Crypto-Mining Windows Apps Removed From Microsoft Store

The eight apps found to be hosting Coinhive. (Source: Symantec)

- Advertisement -

After being downloaded and opened, the apps work by fetching the monero mining JavaScript library by triggering Google Tag Manager in their domain servers. The mining script is then activated and harnesses the bulk of the victim computer’s CPU cycles to mine the cryptocurrency. The JavaScript has also been removed from Google Tag Manager after Google was informed, the post said.

“Although these apps appear to provide privacy policies, there is no mention of coin mining on their descriptions on the app store,” Symantec said.

The apps were published from April to December of last year, although most were published toward the end of the year. Despite being on the Microsoft Store for a relatively short period, “a significant number” of users may have downloaded them onto their PCs, said the firm.

- Advertisement -

Monero (XMR) is by far the most popular cryptocurrency among bad actors deploying mining malware, according to a study published last month. So much so that the author’s of the research estimated that hackers have mined at least 4.32 percent of the total monero in circulation.

“Overall, we estimate there are at least 2,218 active campaigns that have accumulated about 720,000 XMR ($57 million),” they wrote.

Microsoft image via Shutterstock

Previous Articles:

- Advertisement -

Latest News

Coinbase Base App Rebrand Sparks Zora Token and SocialFi Surge

Coinbase rebranded its Wallet to the Base App on July 16, sparking a surge...

Solana Holds $177 Support as ETF Delays Weigh, Eyes $205 Rebound

Solana (SOL) saw its price fall by 3.2% this week after a strong rise...

Astronomer Turns Viral CEO Kiss Cam Scandal Into Data-Driven Win

Astronomer, a data infrastructure company, faced a viral public incident involving its CEO and...

Japan’s Crypto Bottleneck: Regulation, Not Taxes, Drives Talent Out

Regulatory approval delays are causing crypto startups to leave Japan.A proposed 20% flat tax...

Solana Rallies 5%, Eyes $200 as Bulls Challenge $188 Resistance

Solana (SOL) has recovered, rising over 5% in 24 hours and 30% in the...

Must Read

What Is a Sim Swap Hack?

You've likely heard the term 'sim-swap,' but do you really know what it means? It's a type of fraud that's rapidly increasing, where scammers...