I recently came across some troubling news – cryptojacking malware has been discovered in gaming apps on the Google Play store. As an avid gamer who regularly downloads new apps to my Android device, this development has me deeply concerned. In this article, I will provide an in-depth look at this cryptojacking malware, how it works, the potential risks it poses, and what can be done to protect myself and others from falling victim to it.
What Is Cryptojacking?
For those unfamiliar, cryptojacking is a type of cyber attack where a hacker uses a victim’s computing power to mine cryptocurrency without their knowledge or consent. Malware is installed on the victim’s device, allowing the hacker to leverage the processing power of their CPU or GPU to confirm cryptocurrency transactions and earn crypto coins.
Some key points about cryptojacking:
- It is a form of cybercrime that hijacks devices to mine crypto on the hacker’s behalf
- The victim usually does not realize their device is infected and being used to generate crypto
- It can cause devices to overheat, slow down, have decreased battery life, etc. due to resource strain
- Monero is the most common cryptocurrency mined through cryptojacking
How Does The Play Store Cryptojacking Malware Work?
Based on reports, the cryptojacking malware found in games on the Google Play store appears to work like this:
- Hackers upload infected games containing the malware
- When users download and install the games, the malware executable is installed along with it
- The malware then runs silently in the background, using CPU/GPU cycles to mine Monero for the hackers
- Resources are drained from the device, often resulting in poor performance
- The mined Monero is sent back to the hackers’ digital wallets to be cashed out
The malware is able to avoid detection by disguising itself as legitimate app code. The infected games appear normal on the surface, making this a highly deceptive form of attack.
Potential Risks And Impact On Android Users
There are a number of concerning risks and potential impacts of this cryptojacking malware:
- Device performance degradation – With resources diverted to crypto mining, devices run slowly
- Overheating – The strain on the CPU/GPU can cause devices to overheat
- Battery drain – Continuously mining crypto in the background drains battery life quickly
- Data usage spikes – Sending mined coins to the hackers takes up data
- Costly device damage – Overheating can damage devices over time
- Security risks – Malware signifies the device is compromised and vulnerable
For gamers in particular, reduced performance, overheating, and rapid battery drain while playing games may ruin the gaming experience. There are also risks of costly device damage or further exploitation by hackers.
Known Infected Apps Discovered So Far
So far, security researchers have identified the following infected apps that contained this cryptojacking malware:
- Shooting Skills
- Biscuit Entrepreneur
- Car Racing 2019
- Bus Simulator Indonesia
- Extreme Car Driving Simulator
- Free shopping click-baits (multiple apps with this name)
There may be other undetected infected apps still available for download on the Play Store. I will avoid downloading any of the apps listed above. It’s unsettling knowing I may have downloaded infected apps in the past without realizing it.
How To Check If Your Device Is Infected
If you have downloaded apps from the Play Store recently, here are some signs to check if your device may be infected with cryptojacking malware:
- Overheating when not heavily used
- Battery draining abnormally fast
- Dim screen/slow performance during gaming sessions
- Spikes in data usage
- Presence of unfamiliar processes/apps running in task manager
You can also use anti-virus apps to scan your device. Reputable cybersecurity firms like Avast are able to detect known cryptojacking malware strains. Perform scans periodically to check for infections.
Preventing Cryptojacking Malware Infections
Here are some tips to protect yourself from cryptojacking malware moving forward:
- Only download apps from reputable developers – Avoid unknown developers
- Check app reviews for mentions of suspicious activity
- Use anti-virus apps and keep them updated
- Monitor device for overheating/battery drain
- Periodically scan device using security tools
- Keep apps, OS updated to ensure you have the latest security patches
Stay vigilant and be careful when downloading new apps, even those from the Play Store. This incident highlights that Google’s app vetting process is not foolproof. I hope Google further strengthens security screening to prevent this type of malware from spreading further.
Conclusion
The emergence of cryptojacking malware in gaming apps on the Google Play store is very troubling. As an avid mobile gamer myself, I will be taking precautions to protect my device from potential infections. Although Google has removed the known malicious apps, this attack vector may continue to be exploited. Moving forward, I encourage gamers and all mobile users to follow best practices to avoid falling victim to cryptojacking – an insidious form of cybercrime. Increased awareness about this threat will help the community stay vigilant and secure.
