Virtual currency and mining should be considered a hot topic last year and the year before that. It also set off a huge mining wave around the world. The huge profits also tempted many experts to use opportunistic methods to find gold. Many methods have appeared before , such as Chrome plug-ins and web page inlays, which use other people's resources without permission to obtain private benefits without the user's knowledge. Recently, the security company Symantec discovered 8 Windows 10 models in the Microsoft Store. Apps are doing this kind of thing.
A security company discovered that 8 Windows 10 apps in the Microsoft Store contain mining programs
A study published by Symantec recently The report found that 8 applications launched between April and December 2018 will privately call your computer to mine the virtual currency Monero without the user's knowledge. When the user installs and launches these 8 After installing the application, the software will automatically download a JavaScript program for mining Monero. This all happens without notification, without your consent, and without your knowledge until you find that your computer's CPU usage performance is high. If the computer equipment slows down, you will be alert.
The list of these 8 applications (as shown below) exists in various types, including VPNs, YouTube video download tools, browsers, and battery optimization Tools, system cleaning tools, etc. From the perspective that these applications all have the same source network server, security experts suspect that these applications may be written by the same developer or group, and have received good reviews in the store. Although At present, Symantec has reported it to Microsoft, and these applications have been removed from the store, but users who have installed them must manually remove them.
8 of the problems this time All applications are provided to users in the form of Progressive Web Applications (PWA), which can also affect users in S mode. Ironically, Windows 10 S with S mode is what Microsoft claims to be the most secure. The best version. Microsoft needs to pay more attention to application review, and users should not trust too much in those ratings and ratings before downloading. After all, as long as there is data, there is room for manipulation.
◎ Source: Sai Mentec