Malicious Windows 10 Apps found in the Store

Microsoft logoSecurity company Symantec discovered a total of eight different applications published in the Microsoft Store that mined for Monero without users knowing about it.

According to an in-depth analysis of the crypto-mining software, the apps were published in the Microsoft Store between April and December 2018, but most of them went live late last year.

What’s worse is that they had close to 2,000 reviews, which means that there’s a chance a significant number of devices may have been infected.

“However, app ratings can be fraudulently inflated, so it is difficult to know how many users really downloaded these apps,” Symantec says.

As the security vendor explains, most of their apps were disguised as browsers, media players, downloaders, battery optimization tutorials, and were developed by three developers.

“After further investigation, we believe that all these apps were likely developed by the same person or group,” the company notes.

Once the apps are installed and launched on users’ computers, they download a coin-mining JavaScript library that is being used to mine for Monero. Users aren’t notified their PCs are being used for cryptocurrency mining, though devices get significantly slower because of high CPU usage in the background.

All the apps are offered in the Microsoft Store as Progressive Web Applications (PWA) and they can affect Windows 10 in S mode as well. Ironically, Microsoft claims Windows 10 in S Mode is the most secure Windows 10 version because it is restricted to Microsoft Store apps.

Symantec says it has already notified Microsoft about the malicious apps and they have all been removed from the Microsoft Store. However, if you previously installed any of these apps, you should uninstall them as soon as possible.

Source: Softpedia

Tags: Microsoft, security

Comments
Add comment

Your name:
Sign in with:
or
Your comment:


Enter code:

E-mail (not required)
E-mail will not be disclosed to the third party


Last news

 
Google Inbox was due to close down -- it was just a matter of when
 
The patent was published by the Japan Patent Office over the weekend
 
The Stadia servers are capable of providing 4K, 60 frames-per-second performance
 
Exascale supercomputers are capable of a quintillion calculations per second
 
 
GTX 10-series cards will run some ray-traced games well, and others... not so much
 
The maximum number of people that you can have on a Skype video call right now is 25
 
Apple wants all of the spotlight on its new services and subscriptions next week
The Samsung Galaxy A5 (2017) Review
The evolution of the successful smartphone, now with a waterproof body and USB Type-C
February 7, 2017 /
Samsung Galaxy TabPro S - a tablet with the Windows-keyboard
The first Windows-tablet with the 12-inch display Super AMOLED
June 7, 2016 /
Keyboards for iOS
Ten iOS keyboards review
July 18, 2015 /
Samsung E1200 Mobile Phone Review
A cheap phone with a good screen
March 8, 2015 / 4
Creative Sound Blaster Z sound card review
Good sound for those who are not satisfied with the onboard solution
September 25, 2014 / 2
Samsung Galaxy Gear: Smartwatch at High Price
The first smartwatch from Samsung - almost a smartphone with a small body
December 19, 2013 /
 
 

News Archive

 
 
SuMoTuWeThFrSa
     12
3456789
10111213141516
17181920212223
24252627282930
31




Poll

Do you use microSD card with your phone?
or leave your own version in comments (15)