Microsoft has removed eight apps with secret crypto miners from the store after a report by Symantec last month. The apps are listed by three different developers but believed to have been created by the same group.
For the curious, the crypto jacking apps were: FastTube, VPN Browser+, Downloader for YouTube Videos, Clean Master+, Findoo Browser 2019, Findeoo Mobile & Desktop search, Fast-search Lite, and Battery Optimizer.
The currency being mined is Monero, which is designed specifically for privacy and security and is often used on the darknet. The apps are able to mine on both regular Windows 10 and Windows 10 S mode, so this is a significant bypass of Microsoft’s security.
It’s not clear how much Monero the group mined, but the apps have been live since between April and December 2018. The apps had up to 1,900 ratings, but it’s not clear if they were fraudulent.