Google Play removed eight deceptive cryptocurrency apps after they were discovered to be fake and tricking users to watch advertisements, as per security firm Trend Micro. These apps are masqueraded as cryptocurrency cloud mining apps where users can earn cryptocurrency by investing money into a cloud-mining operation. Trend Micro reports that these eight malicious apps tricked victims into watching ads, paying for subscription services that have an average monthly fee of $15 (roughly Rs. 1,100), and paying for increased mining capabilities without getting anything in return.
Trend Micro reports that the eight fake cryptocurrency apps were: BitFunds – Crypto Cloud Mining, Bitcoin Miner – Cloud Mining, Bitcoin (BTC) – Pool Mining Cloud Wallet, Crypto Holic – Bitcoin Cloud Mining, Daily Bitcoin Rewards – Cloud Based Mining System, Bitcoin 2021, MineBit Pro – Crypto Cloud Mining & BTC miner, and Ethereum (ETH) – Pool Mining Cloud. The firm says that two of these malicious apps were even paid; meaning users had to purchase them on installation. This strategy was used to gain the trust of the user. Trend Micro says Crypto Holic – Bitcoin Cloud Mining costs $12.99 (roughly Rs. 960) to download, while Daily Bitcoin Rewards – Cloud Based Mining System costs $5.99 (roughly Rs. 450).
The firm says that these fake apps had no cryptocurrency-mining behavior. They are said to have carried out bogus mining activity via a local mining simulation module that included a counter and some random functions. These apps lured users to pay for increased cryptocurrency-mining capabilities via the apps’ in-app billing systems that range from $14.99 (roughly Rs. 1,111) to as high as $189.99 (roughly Rs. 14,000), as per Trend Micro.
Google is said to have already removed these apps from Google Play, but Trend Micro says that when it searched keywords like ‘cloud mining’ on Google Play it found many concerning apps of the same type. Few of these apps have even been downloaded more than 100,000 times, as per the security firm.
Trend Micro advises that in order to determine whether an app is phony, users can carefully read the app’s reviews and pay more attention to the 1-star review. Also, try entering the wrong cryptocurrency wallet address. If the app accepts it and is able to perform follow-up operations, then it is likely to be fraudulent. Recheck if there is a withdrawal fee. The transfer of cryptocurrency requires a handling fee, which is relatively high compared to what is typically made from cloud mining. Hence, free-of-cost withdrawals should be considered very suspicious.