Although mobile malware is less of a problem than it used to be back in the days of yore when Google was getting the hang of entering the smartphone market, the cryptocurrency market started to make hacking more profitable due to the ability to commandeer the resources of other people’s systems to mine digital coins.
As the desktop and corporate system ecosystems get crowded with all sorts of malware, new hackers turn their gaze towards mobile phones, which boast a decent amount of performance for their chips. Now your phone has a target on its back, and it’s time to arm yourself to combat the issue.
The Process
Usually, when a hacker wants to infect an Android phone, they will make a fake app that merely mines cryptocurrency while running in the background. Another method would be to inject code into an otherwise legitimate app, making it harder for the victim to suspect that this app is the culprit.
Since the vast majority of mobile phones don’t have dedicated GPUs that process things in the same way that desktop chips do, the app will often use the phone’s CPU.
What’s the Harm?
There’s a reason people don’t use their phones to mine cryptocurrencies. Although they can squeeze a lot of computing power without consuming a lot of electricity, you don’t see mining centers stocking up on smartphones. Instead, they are either using GPUs or stocking up on specialized chips called ASICs. The only reason someone would mine cryptocurrency on a smartphone would be to ruin it.
Your smartphone’s battery is designed to take the rigors of daily use with flair and, as a result, benefit from a longevity of a few years. However, if you begin stressing the battery, it will generate heat, and its internal resistance will go up. Even for short periods of time with some interruption, your battery will suffer permanently if you apply enough stress for it to climb above 30°C (86°F). As you do this more, the anode on the battery will crystallize further.
For now, the only conclusion you should reach is that any excessive abuse of your battery is terrible for its health.
So, let’s say you start mining Monero on your phone. This will push the CPU to its limits, sucking as much juice out of your battery as it can deliver. Over an extended period (even for a week or so) the effects will be undoubtedly visible. After the mining stops, the phone’s battery just won’t last as long as it used to.
If you do this too much, you could end up making the battery virtually useless, especially since you’d have to put it through several charge cycles, all of which will take place while the phone’s mining. Imagine a 2-amp charge coming into the battery while it’s being drained with as much wattage as the CPU can muster. In some instances, its health diminishes quite noticeably in less than a month!
In some phones that may not have the best heat dissipation capability, the situation only gets worse. You could end up with a hardware failure or, to put the icing on the cake, your battery could just start bulging out of your phone because of the immense heat.
What Are the Signs?
Since crypto mining malware has far more devastating consequences for smartphones than PCs, it’s that much more important to spot the signs of a leech on your device before it has a chance to wreak havoc. Luckily for you, the symptoms of mining malware are much easier to spot on a phone. Here are a few you can detect immediately without using any specialized software:
- Your phone feels unusually hot on your hand even after you’ve stopped using it for a while.
- The interface often stutters even when you’re just looking at your settings.
- Apps take much longer to open than they used to just a while ago.
- Your keyboard takes much longer to pop up when you want to type something.
- The battery life of your phone abruptly starts to drop. You find yourself having to charge your device much more often now.
Of course, you have to find the culprit if you want to save your phone from its impending doom.
Stopping the Malware in Its Tracks
Barring an advanced task manager, probably the easiest way to find out which app is using your phone to mine is to look at your battery statistics. On the latest version of Android, this can be done via “Settings -> Battery -> Consumption level.”
Almost all versions of Android will show you battery consumption statistics ordered by what share each app has expressed as a percentage. The app with the highest rate is most likely the culprit. Once you’ve uninstalled the app, your phone should be fine.
Fortunately, malware for mobile phones generally isn’t sophisticated enough to “hook” to the system or fiddle with permissions that make it hard to remove, as is usually the case with Windows viruses. Uninstall it and it’s gone!
Prevention Is Key
Three things are generally true about apps that mine cryptocurrencies on your phone maliciously:
- If you look for an official website, you won’t find one unless it’s a fake version of another app with a site. Hackers generally see no purpose in going through that much effort just so that their malware looks legitimate. They either make an APK and market it through other means or piggyback on the success of another app with their fake version.
- The APKs these hackers make don’t generally reside on Google Play. You usually get these by downloading them from other sites or through other app repositories. A few of them have made it through Google Play’s system, but they were always removed as swiftly as they came in.
- You might come across these APKs as a link from an infected friend that sent it to you. Rarely will you ever see these APKs in official channels.
See a pattern here? There are only two things you need to do to prevent getting hit by mining malware: look for signs of fishiness and avoid downloading apps outside of Google Play.
Sure, some apps can only be installed via third-party sites (such as Gab, a social network focused on the freedom of expression), but these are rare exceptions. In those cases you could enable the setting to allow apps from unknown sources temporarily but then disable it once you’ve installed your app. This should only be done in the case you’re absolutely sure that the app you’re downloading is trustworthy enough not to wreck your phone.
Now that we got this all out of the way, have you ever been hit by malware on Android? Tell us about your experience!
Miguel Leiva-Gomez
Miguel has been a business growth and technology expert for more than a decade and has written software for even longer. From his little castle in Romania, he presents cold and analytical perspectives to things that affect the tech world.
Subscribe to our newsletter!
Our latest tutorials delivered straight to your inbox
FAQs
Is your phone heating up faster than usual? Does it feel unusually hot on your hand, even when you're not using apps that consume a lot of power? Does it remain hot even if you put it down for a while? If the answer to these questions is yes, then there's a good chance your device is being used to mine crypto.
How do I find hidden malware on Android? ›
Check for Android malware using Play Protect
- Open the Play Store on the Android device you want to scan.
- Tap on your profile in the upper-right corner.
- Tap on Play Protect.
- Tap Scan.
- Tap on the option to remove any detected malware.
How to remove viruses and other malware from your Android device
- Power off the phone and reboot in safe mode. Press the power button to access the Power Off options. ...
- Uninstall the suspicious app. ...
- Look for other apps you think may be infected. ...
- Install a robust mobile security app on your phone.
We can detect cryptomining activities based on the known patterns of most insider threats of cryptomining:
- High CPU usage.
- Communicating to mining pools.
- The executed command line of the miner.
- The signatures of those miner binaries.
The only signs they might notice is slower performance, lags in execution, overheating, excessive power consumption, or abnormally high cloud computing bills.
How do I get rid of crypto mining malware? ›
BitcoinMiner Trojan, follow these steps:
- STEP 1: Use Rkill to terminate malicious processes.
- STEP 2: Uninstall malicious programs from Windows.
- STEP 3: Reset browsers back to default settings.
- STEP 4: Use Malwarebytes to remove for Trojans and Unwanted Programs.
- STEP 5: Use HitmanPro to remove Rootkits and other Malware.
If you do not recognize a downloaded service in the Accessibility options, you may want to remove it. Many of the stalkerware apps are disguised as plain apps called “Accessibility” or “Device Health.”
Where is malware usually hidden? ›
Malware is usually distributed through malicious websites, emails, and software. Malware can also be hidden in other files, such as image or document files, or even in seemingly innocuous files, such as .exe files.
Will factory reset remove malware Android? ›
The short answer is yes, in most cases. Viruses are typically embedded in malicious files or apps on your phone, and since a factory reset removes all of your files it will often remove the offending virus or malware, too.
Does factory reset remove malware? ›
Will a factory reset remove a virus? Performing a factory reset is the best way to get rid of viruses, spyware, and other malware. A factory reset will delete everything that wasn't originally installed on the device. This includes any viruses that infected your operating system and files.
Examples of Crypto Malware
XMRig: XMRig is an open-source cryptojacking malware that is commonly incorporated into other types of malware. It is designed to mine the Monero or Bitcoin cryptocurrency.
Is my computer secretly mining cryptocurrency? ›
How to Check Computer for Hidden Mining. To check your computer for hidden mining, you can run Windows Task Manager (by pressing Ctrl+Alt+Del and activating Task Manager) or another program that allows you to monitor the CPU, GPU, memory, disk space, network activity and what processes are running on the system.
What is cryptojacking malware? ›
Cryptojacking programs may be malware that is installed on a victim's computer via phishing, infected websites, or other methods common to malware attacks, or they may be small pieces of code inserted into digital ads or web pages that only operate while the victim is visiting a particular website.
What is the top crypto mining malware? ›
| Characteristic | Share of organiaztions |
|---|
| XMRig | 76% |
| LemonDuck | 10% |
| Wannamine | 8% |
| Kinsing | 1% |
1 more rowApr 20, 2023
Follow this guide to learn more about the signs of malware and how you can diagnose and treat a malware infection.
- Slow performance. ...
- Unexpected freezing or crashing. ...
- Diminished storage space. ...
- Homepage randomly changes. ...
- Browser redirects. ...
- New browser toolbars. ...
- Annoying pop-ups. ...
- Unusual error messages.
Central processing unit (CPU) use spikes in response to cryptojacking. Victims with Windows can check their CPU use in Activity Monitor or Task Manager when visiting sites that run little or no media content. If users notice an odd spike, this may indicate a cryptojacking cyber attack.
Do I have a mining virus? ›
A dangerous crypto mining malware mostly infects through downloads and browser-based attacks. Slow performance, lagging, and overheating are warning signs of mining malware infection.
What is an example of cryptojacking? ›
Coinhive. Coinhive was a cryptocurrency mining service that was launched in 2017. It allowed website owners to embed a JavaScript code on their websites, which would then use the website visitor's computer to mine the Monero cryptocurrency. This was known as “in-browser mining,” and it was a form of cryptojacking.
How can I tell if my phone is being monitored by a spy app? ›
If someone is using spyware to spy on your phone, you might notice the following changes to your phone.
- Mysterious data-use increases.
- Rapid battery drainage.
- Phone overheats.
- Strange noises during calls.
- Phone gets sluggish.
- Suspicious changes and charges.
- Signs of activity in stand-by mode.
- Slow shut down & start up.
You'll see a small teardrop symbol in your phone's notification bar when an app is using your device location. If you see this appear when you're not using apps allowed to access location data, this could indicate spyware is running and tracking your location.
Click on the home screen settings. It will navigate you to the Hide apps menu; tap on it. Here, you will see the hidden apps that are not showing in the app list. If the hidden screen doesn't show any apps or the Hide apps menu is missing, it means no apps are hidden in your device.
Which malware secretly gathers information? ›
Spyware, also known as "adware," is software that sends information from your computer to a third party without your consent. Besides secretly monitoring a user's behavior, spyware collects personal information, which could lead to identity theft.
How do I completely check for malware? ›
Open your Windows Security settings. Select Virus & threat protection > Scan options. Select Windows Defender Offline scan, and then select Scan now.
Which malware can spy on you? ›
Spyware is a form of malware that hides on your device, monitors your activity, and steals sensitive information like bank details and passwords.
How do I check my Android device logs? ›
To view the log messages for your app, do the following.
- In Android Studio, build and run your app on a physical device or emulator.
- Select View > Tool Windows > Logcat from the menu bar.
How to View Hidden Devices in Windows Device Manager
- Start by opening the Device Manager by pressing Win + R, typing “devmgmt. msc” in the text box, and pressing the Enter key.
- Click View on the top menu and select Show Hidden Devices.
On devices running Android 8.0 (API level 26) and higher, companion device pairing performs a Bluetooth or Wi-Fi scan of nearby devices on behalf of your app without requiring the ACCESS_FINE_LOCATION permission. This helps maximize user privacy protections.
Does shutting down your phone remove malware? ›
Step 1: Reboot your phone
Simple, unsophisticated viruses which are known as non-persistent malware can be removed with a reboot. Click and quickly release the volume up button, click and quickly release the volume down button and then, press and hold the power button until the Apple logo appears.
Will factory reset stop a hacker? ›
Yes, you should be able to remove a hacker by doing a factory reset on your phone. Keep in mind that this solution will remove all of your data, including contacts, third-party apps, photos, and other files. You will need to set up your phone entirely from scratch.
What to do after malware is removed? ›
Unfortunately your other choices are limited, but the following steps may help save your computer and your files.
- Call IT support. ...
- Disconnect your computer from the Internet. ...
- Back up your important files. ...
- Scan your machine. ...
- Reinstall your operating system. ...
- Restore your files. ...
- Protect your computer.
A factory reset deletes all data from your phone.
A factory reset reverts your phone back to its factory settings, forcing you to set it up again as if it is fresh out of the box. Because of the severity of a factory reset, it should only be used as an extreme measure.
Will a factory reset remove spyware? ›
A factory reset will delete everything on your phone, including the spyware. Make sure you have a backup of your phone before you do this to prevent losing your photos, apps, and other data. You'll need to restore your phone to a backup from before you started experiencing the spyware issues.
Can you manually delete malware? ›
To remove malware manually from a system, follow these basic steps: On a separate computer, download a malware-removal tool like McAfee Stinger (or another similar tool from a major antivirus vendor) and save it to a USB drive. You may need to use other similar tools depending on the specific malware.
Is it enough to remove a Trojan virus? ›
However, there are types of Trojans that install additional malicious programs. Simply removing the Trojan may not be enough, so it's best to use antivirus software to get rid of all traces of a Trojan attack.
How do you know if your phone has a Trojan virus? ›
7 signs your phone has a virus
- Your device feels physically hot. Your phone isn't built to support malware. ...
- Random messages are sent to your contacts. ...
- The device responds slowly. ...
- You find fraudulent charges on your accounts. ...
- The phone uses excess data.
That said, most Trojans are designed to take control of a user's computer, steal data, spy on users, or insert more malware on to a victim's computer. Here are some common threats that come from Trojan attacks: Backdoors, which create remote access to your system.
What does Coinminer malware do? ›
Coin Miner is a malware that concentrates on earning cryptocurrencies by mining them on victims' CPU or GPU. You may be interested in taking a look at our other antivirus tools: Trojan Killer, Trojan Scanner.
What malicious software will use your computer to secretly mine cryptocurrency for the attacker? ›
Cybercriminals hack into devices to install cryptojacking software. The software works in the background, mining for cryptocurrencies or stealing from cryptocurrency wallets. The unsuspecting victims use their devices typically, though they may notice slower performance or lags.
How do I know if my app is mining crypto? ›
Apps Are Lagging and Crashing
Another sign that your smartphone is infected with cryptojacking malware is apps being unresponsive, freezing, lagging, or crashing frequently—this happens because crypto miners eat up all the CPU power.
Can the government track crypto mining? ›
Yes, the IRS can track cryptocurrency, including Bitcoin, Ether and a huge variety of other cryptocurrencies. The IRS does this by collecting KYC data from centralized exchanges.
In that sense, crypto mining can damage your GPU like heavy gaming or 3D rendering. In addition, the GPU has to work 24/7 in crypto mining, operating with full power to perform calculations. Prolonged exposure to constant heat can increase wear and tear even if you run your GPU at safe temperatures.
What are the symptoms of crypto mining malware? ›
The only signs they might notice is slower performance, lags in execution, overheating, excessive power consumption, or abnormally high cloud computing bills.
What are some signs that you have a cryptomining malware installed on a computer? ›
Some common signs of a potential cryptojacking breach are slower computer speeds, unusually high CPU usage, and overheating hardware. But some cryptojackers take measures to mask these signs.
How do I stop my iPhone from mining? ›
Block cryptocurrency mining: On iPhone and iPad
There are two ways to go about this on Safari — disable Javascript, or use a content blocker app such as 1Blocker. Here's how to disable Javascript on Safari for iOS. Go to Settings > Safari. Tap Advanced > disable Javascript.
How do I check my phone for malware? ›
The best way to check for malware on your phone is to use a mobile security app like free AVG Antivirus for Android. Run a scan. After installing AVG Antivirus, open the app and run an antivirus scan to find malware hidden in your device's system.
Can you mine off your phone? ›
Mobile Miner
The well-known cryptocurrency mining program MobileMiner enables users to mine different cryptocurrencies on their mobile devices. The program is simple to use and has a wide range of customization possibilities, making it a fantastic alternative for both novice and seasoned miners.
Is it possible to do mining on mobile phone? ›
Solo-mining of cryptocurrencies is not a viable concept if you want to use your phone or tablet for it. However, you can use a cloud service by renting computing power. This can come with a mobile app that provides a convenient personal account interface on the cloud service.
How do I stop data mining on Android? ›
- Tap Location.
- Select Google Location Settings.
- Toggle off for Location Reporting and Location History.
- You can also delete your location history.
- If you need your location enabled for a specific app, you can manually toggle it on then toggle off again when you're done.
Utilize a Virtual Private Network
One of the best ways to stop data miners from getting your information is to use a secure VPN. Normally, when you want to access the internet, you would need an IP address. This IP address contains private information about you such as your location.
How can you stop mining? ›
To curb illegal mining, governments must ensure proper closure and security of all closed mines. In addition to financial guarantees, governments must insist that mining companies provide mine closure plans before granting permits.
How Do I Completely Remove Malware from Android?
- Step 1: Immediately Turn Your Phone Off Before Performing Some Research. ...
- Step 2: Turn the Phone On in Safe Mode or Emergency Mode. ...
- Step 3: Go to Device Settings to Locate the Malicious App. ...
- Step 4: Uninstall the Infected Application. ...
- Step 5: Opt For A Factory Reset.
What are the signs my phone has a virus?
- Your phone is operating slower.
- Apps are taking longer to load.
- The battery drains faster than expected.
- You're experiencing a lot of pop-up ads.
- Your phone has apps you don't remember downloading.
- Unexplained increase in data usage.
- Higher than expected phone bills.
Your device may suddenly become sluggish or apps may not load correctly. Battery life may decrease as well. Another potential sign of a virus is when unexpected ads pop up or phone or text messages that you never sent show up in your phone logs. A virus can also slow internet access or increase data usage.
Which mobile phone is mine? ›
Check your phone's settings
Go to the Settings or Options menu, scroll to the bottom of the list, and check 'About phone', 'About device' or similar. The device name and model number should be listed.
Can your phone be tracked by someone? ›
Can someone track my phone? Yes, family and friends can track your phone if you use location tracking services like Find My on your iPhone. Advertisers and companies can use web tracking technology like cookies to track your phone and online browsing activity.
Does crypto mining damage your phone? ›
Crypto Mining Will Damage Your Phone
So, if you're using a mining app on your phone while using it for day-to-day activities, you may notice that the overall performance speeds are lacking. Mining crypto on your smartphone can also have a negative effect on its lifespan.
Is it possible to mine in Android? ›
On an Android device, one can mine Bitcoin and other cryptocurrencies. On the other hand, mobile mining functions differently from traditional mining techniques, which depend on specialized equipment and software. This article lists the Android apps for cryptocurrency mining that are currently available.
What is mobile cloud mining? ›
What is mobile crypto mining, and how does it work? Mining cryptocurrencies using the processing capacity of smartphones powered by iOS and Android systems is called mobile crypto mining. As mentioned before, in mobile mining, rewards will be approximately the same percentage as computing power offered by miners.
How much money can you make mining on your phone? ›
Summary. Now you know what mining is and how mining apps work on your phone. It can be a stable passive income, but it will not provide a significant income. Ideally, you will earn $10-15 per month using this method, but you need a fairly powerful smartphone that functions 24/7 and is not used for other tasks.
