Litecoin wallet mining pool

Researchers have identified more malware at the Google Play store that secretly harnesses users’ devices to perform the arduous computational process.

The malware,dubbed BadLepricon,was found masquerading as wallpaper apps that had hundreds of installs each,according to Lookout,a mobile security firm. Google promptly removed five such apps from the Google Play marketplace after being alerted to their presence,Lookout wrote in a blog post Thursday.

“These apps did fulfill their advertised purpose in that they provided live wallpaper apps,which vary in theme from anime girls to ‘epic smoke’ to attractive men, ” Meghan Kelly,a Lookout security communications manager,wrote in a company blog post. “However,without alerting you in the terms of service,BadLepricon enters into an infinite loop where — every five seconds — it checks the battery level,connectivity,and whether the phone’s display was on.”

As mobile devices get more powerful and sophisticated,malware authors are increasingly targeting tablets and smartphones to mine cryptocurrencies. The malware essentially turns the devices into a bot that uses a great deal of computer processor and battery power without the device owners’ knowledge or consent.

If left unchecked,bitcoin miners can use up so much processing power that it burns out the device,Kelly warned. So to avoid a circumstance that would lead to the malware’s discovery,BadLepricon checks to make sure the battery contains at least 50 percent of its capacity,it has Internet connectivity,and that its display is turned off.

The sophisticated malware also used a Stratum proxy that allowed the malware’s author to easily change mining pools and anonymously control which bitcoin wallet receives the newly minted crypto-coins,researchers wrote. The malware also uses a feature called a WakeLock to prevent the device from going to sleep even if the display is turned off.