Technology Cryptocurrency mining site hijacked millions of Android phones

14:43  13 february  2018
14:43  13 february  2018 Source:   engadget.com

UNICEF recruits gamers to mine cryptocurrency for Syrian kids

  UNICEF recruits gamers to mine cryptocurrency for Syrian kids It hopes to appeal to young people's desire to do social good.Game Chaingers uses your graphics card's power to mine for cryptocurrency, which then goes straight to UNICEF's account. Of course, the more participants there are, the more coins it can mine -- if the hundreds of millions of gamers around the world help out, the organization can raise a considerable amount. UNICEF says it created the project out of a need to find new donors, since most of its benefactors are already over 50. By asking to borrow PCs' processing power instead of straight-out appealing for cash, even those who wouldn't usually give to charities could contribute.

  Cryptocurrency mining site hijacked millions of Android phones © Provided by Engadget

Smartphone users are just as vulnerable to cryptocurrency mining hijacks as their PC counterparts, and sometimes on a dramatic scale. Malwarebytes has detailed a "drive-by" mining campaign that redirected millions of Android users to a website that hijacked their phone processors for mining Monero. While the exact trigger wasn't clear, researchers believed that infected apps with malicious ads would steer people toward the pages. And it wasn't subtle -- the site would claim that you were showing "suspicious" web activity and tell you that it was mining until you entered a captcha code to make it stop.

Power-Hungry Crypto Mines Clean Up as Cost of Electricity Grows

  Power-Hungry Crypto Mines Clean Up as Cost of Electricity Grows Renewable energy is becoming the preferred way of mining digital currencies like Bitcoin as prices surge and the industry seeks more computing power. While traditional fuels like coal remain staples for many utility grids, big miners including Bitmain Technologies Ltd., HIVE Blockchain Technologies Ltd. and Bitfury Group are tapping clean power in places like Canada, Iceland and Paraguay -- and luring investors worried about the industry’s carbon footprint.

The exact number of victims isn't apparent, but it's large. Malwarebytes identified five internet domains using the same captcha code and Coinhive site keys used for the campaign. At least two of the sites had over 30 million visits per month, and the combined domains had about 800,000 visits per day. Even though most people only ever spent a short amount of time on the pages (an average of 4 minutes), that amounted to a lot of mining time.

Not surprisingly, Malwarebytes is recommending that Android phone users use web filters and security software to fend off these hijacks. We'd add that you can reduce the odds of encountering these campaigns by sticking to Google Play for app downloads, since you're less likely to run into rogue apps. However, it's doubtful that mining ploys like this will go away any time soon. So long as cryptocurrency values remain through the roof, you're bound to see someone hoping to make a few coins at your expense.

Malwarebytes Labs

How to transfer contacts from Android to Android .
Make your new phone feel like homeBecause all Android phones strongly recommend you log in with your Gmail account – and lose a lot of functionality if you don’t – the chances are you won’t have to do very much work for your new Android device to be full of your friends. Nonetheless, these are the steps you need to take.

—   Share news in the SOC. Networks

Topical videos:

This is interesting!