Fake Android Apps Promise Cryptomining Services to Steal Funds

Researchers discover more than 170 Android apps that advertise cloud cryptocurrency mining services and fail to deliver.

Dark Reading Staff, Dark Reading

July 8, 2021

1 Min Read

Researchers with the Lookout Threat Lab have identified multiple Android applications that steal money from users looking to invest in cryptocurrencies. The team found more than 170 fraudulent Android apps, including 25 on Google Play, that offer cloud cryptocurrency mining services for a fee.

"After analyzing them, we found that no cloud crypto mining actually takes place," researchers wrote in a blog post. "The apps' entire raison d'être is to steal money from users through legitimate payment processes, but never deliver the promised service. Based on our analysis, they scammed more than 93,000 people and stole at least $350,000 between users paying for apps and buying additional fake upgrades and services."

Google has removed the apps from Google Play.

Researchers say the apps were able to fly under the radar because they don't do anything overtly malicious.

"In fact, they hardly do anything at all. They are simply shells to collect money for services that don’t exist," researchers said.

The blog post on the scam can be found here.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like

More Insights