Another Cryptocurrency Malware Found on Google Play Store by horpey

malware · @horpey · Feb 11 '19

$6.88

Another Cryptocurrency Malware Found on Google Play Store

<div class="text-justify">

Despite how Google is trying to make its App Store save and secure for Android users, some apps are still proving to be smarter. 

![](https://cdn.pixabay.com/photo/2016/07/06/17/49/computer-1500929_1280.jpg)

A Cryptocurrency Malware called 'Clipper' was spotted on Google Play Store by researchers at [ESET](https://www.welivesecurity.com/2019/02/08/first-clipper-malware-google-play/).

The cryptocurrency-stealing Clipper was found hidden in an app impersonating MetaMask as it does not have its official app. After the malware was reported on [Twitter](https://twitter.com/LukasStefanko/status/1093843832112844800), MetaMask tweeted: 

> We would appreciate if @GooglePlayDev would reserve trademarked names for apps, especially repeat phishing targets like us.

MetaMask is a browser extension which allows Ethereum based-app to run without installing Ethereum full node.

Clipper is a dangerous malware, it can steal user's data and change recipient address to a fake one. However, the malware was reported and got deleted from the Google Play Store on February 1.

![Blue line](https://image.ibb.co/j9fH70/blue-line.png)

<sup>[source](https://fossbytes.com/cryptocurrency-stealing-malware-clipper-found-on-google-play/)</sup>

</div> 
<img src="https://img.esteem.ws/s9kaca2woo.png" alt="horpey footer"/>

👍 top-exchanges, esteemapp, oracle-d, pro-content, roundbeargames, syedumair, magicmonk, khanza.aulia, good-karma, horpey, steem-ua, always1success, cryptopie, samminator, bait002, hungryhustle, helpie, isaria, owner99, erikah, paulag, spotlight.artist, jaraumoses, accelerator, crimsonclad, face2face, steeimran, daan, midun, theatreofdelays, mahyulmaulana, k-banti, fl15, camuel, podanrj, esteliopadilla, aqilafatan, wolfnworbeikood, cooperfelix, barthmaul, sasaadrian, davidke20, clayboyn, bluemoon, newenx, sward, musicvoter, greencross, steem-jackpot, esteem.app, luciancovaci, nasrina.nasir, crypto-whiz, zainenn, momogrow, cryptocurator, ascorphat, hamidi103, edprivat, carrieallen, peter-ella, asridsyaref, anarcotech, jadabug, and 80 others

properties (23)vote details (144)

voter	rshares	pct
mammasitta	554,500,844	0.1%
good-karma	230,888,991,848	15%
daan	12,406,490,118	3%
mysteem	439,429,877	15%
magicmonk	302,642,081,938	50%
always1success	118,569,907,754	38%
elamental	97,193,178	1%
demo	579,211,455	15%
anarcho-andrei	145,539,643	0.9%
feruz	1,301,394,132	15%
clayboyn	4,845,670,871	7%
greencross	3,348,025,302	20%
sward	3,663,648,427	30%
esteemapp	2,359,407,873,612	15%
adialam	220,624,382	7.5%
anarcotech	1,441,441,703	2.25%
momogrow	1,982,416,385	3%
cryptocurator	1,931,120,825	0.9%
oscarcc89	341,109,923	1.5%
isaria	49,560,473,150	10%
samminator	82,940,599,281	100%
crimsonclad	21,001,057,410	5%
asridsyaref	1,486,325,093	45%
paulag	35,664,592,280	10%
jaraumoses	23,194,131,140	100%
cryptopie	107,463,606,925	25%
discordiant	976,669,404	5%
dudiland	1,133,962,539	100%
face2face	19,445,881,133	38%
bluemoon	4,454,822,931	15%
luciancovaci	2,671,529,735	81%
amymya	72,044,041	0.3%
owner99	46,306,584,233	50%
teukumuhas	83,967,207	5%
ayubloaded	1,250,833,225	100%
crypto-whiz	2,470,938,086	100%
redrica	439,233,737	0.66%
horpey	169,102,889,814	100%
syedumair	315,007,139,173	100%
jadabug	1,323,914,887	1%
accelerator	23,128,922,637	1.51%
trevorpetrie	389,349,505	3%
davidke20	5,011,759,302	15%
carrieallen	1,833,431,492	5%
podanrj	7,831,396,676	100%
cryptostunner	553,744,376	100%
adewunmi	554,356,145	100%
palsbot	1,223,159,676	100%
firman	249,734,031	15%
bait002	79,124,342,846	100%
esteem.app	2,754,190,205	15%
aranda	411,494,997	100%
akano	553,017,974	100%
ayobami11	691,189,035	100%
adekunle578	553,936,108	100%
socent	671,950,981	15%
wolfnworbeikood	5,591,869,924	13%
helpie	51,546,984,287	3%
machroezar	300,112,314	7.5%
nasrina.nasir	2,483,553,760	50%
markaustin	409,937,493	5%
luisferchav	73,023,116	1.5%
hungryhustle	51,659,715,014	90%
ekonugraha	299,279,271	2.1%
steeimran	18,122,456,656	100%
daeshawn	1,258,212	2.25%
roundbeargames	354,640,820,292	100%
henrychidiebere	1,074,988,084	100%
k-banti	10,002,518,663	85%
mjeed101	551,827,244	100%
edprivat	1,834,132,055	0.15%
grizzle	91,038,273	1%
lunaticpandora	587,910,977	1.2%
silentscreamer	194,227,081	1.5%
warpedpoetic	79,883,801	0.45%
hazem91	77,926,135	0.6%
bendismuzik	226,677,325	70%
verhp11	98,074,368	1%
midun	11,437,429,781	58%
gjart	1,123,727,980	30%
mindtrap	558,823,209	0.15%
zipporah	601,370,832	0.6%
siomarasalmeron	107,940,904	1.5%
djoi	195,454,396	3%
newenx	4,098,450,724	20%
erikah	37,508,814,232	50%
foxyspirit	96,014,510	0.6%
barthmaul	5,223,573,456	100%
hamidi103	1,869,021,882	30%
peter-ella	1,699,150,954	70%
mahyulmaulana	10,144,224,306	100%
teungkulik	223,787,770	30%
princessola	551,713,101	100%
ezravandi	800,762,979	1%
mini-zephalexia	451,274,799	12%
virtaco300cc	121,073,443	25%
thestronics	554,195,243	100%
theatreofdelays	10,317,021,611	100%
effofex	110,261,642	0.75%
aqilafatan	5,841,482,038	100%
suliat	553,021,062	100%
dmaniagod	553,415,950	100%
camuel	9,511,277,549	20%
solominer	1,225,209,586	3%
archaimusic	121,257,354	10%
musicvoter	3,621,341,130	1%
kabil	285,952,664	7.5%
sandiiyong	218,786,758	100%
syahrizaldawood	130,922,045	30%
fl15	9,744,281,288	60%
esteliopadilla	7,250,893,898	100%
victoria-bella	251,739,261	25%
lillywilton	757,286,323	20%
px1	542,796,081	100%
yestermorrow	215,570,651	0.75%
khanza.aulia	243,043,427,069	50%
zainenn	2,293,442,356	1.5%
ekafao	211,739,010	30%
yishion	543,778,297	100%
china-unicom	543,659,584	100%
china.mobile	447,600,050	100%
safroel72	269,730,428	30%
oracle-d	2,315,125,828,760	3%
steeming-hot	0	0.05%
rikday	202,633,386	50%
emsteemians	101,831,880	10%
hornetmusic	76,140,967	50%
pro-content	1,767,657,765,614	100%
top-exchanges	5,813,831,126,441	100%
merlin7	314,460,158	0.01%
thoor	70,360,759	20%
sasaadrian	5,162,843,885	20%
steem-ua	154,007,770,210	1.48%
solarphasing	298,647,210	10%
steem-jackpot	2,900,037,756	99.99%
mrsbozz	232,951,589	5%
ishare	982,483,060	100%
ascorphat	1,923,369,767	2.5%
eternalsuccess	82,741,107	1%
cooperfelix	5,406,482,198	40%
tony.montana	1,217,816,265	2.5%
xrp.trail	917,458,469	1.4%
derrickprince	225,598,982	100%
spotlight.artist	28,778,013,370	4%

@esteemapp · Feb 11 '19

Thanks for using **eSteem**! <br>Your post has been voted as a part of [eSteem encouragement program](https://steemit.com/esteem/@good-karma/encouragement-program-continues-82eafcd10a299). Keep up the good work! Install [Android](https://play.google.com/store/apps/details?id=app.esteem.mobile), [iOS](https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=1141397898&mt=8) Mobile app or [Windows, Mac, Linux](https://github.com/esteemapp/esteem-surfer/releases) Surfer app, if you haven't already!<br>Learn more: https://esteem.app <br>Join our discord: https://discord.gg/8eHupPq

properties (22)

`post_id`	70,008,297
`author`	esteemapp
`permlink`	re-2019211t112618185z
`category`	malware
`json_metadata`	{"tags":["esteem"],"app":"esteem\/2.0-welcome","format":"markdown+html","community":"esteem.app"}
`created`	2019-02-11 10:26:18
`last_update`	2019-02-11 10:26:18
`depth`	1
`children`	0
`net_rshares`	0
`last_payout`	2019-02-18 10:26:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 SBD
`curator_payout_value`	0.000 SBD
`pending_payout_value`	0.000 SBD
`promoted`	0.000 SBD
`body_length`	593
`author_reputation`	396,075,316,369,469
`root_title`	"Another Cryptocurrency Malware Found on Google Play Store"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 SBD
`percent_steem_dollars`	10,000

@steem-ua · Feb 11 '19

#### Hi @horpey!

Your post was upvoted by @steem-ua, new Steem dApp, using UserAuthority for algorithmic post curation!
Your **UA** account score is currently 4.261 which ranks you at **#2740** across all Steem accounts.
Your rank has not changed in the last three days.

In our last Algorithmic Curation Round, consisting of 221 contributions, your post is ranked at **#178**.
##### Evaluation of your UA score:

* Some people are already following you, keep going!
* The readers appreciate your great work!
* Try to work on user engagement: the more people that interact with you via the comments, the higher your UA score!


**Feel free to join our [@steem-ua Discord server](https://discord.gg/KpBNYGz)**

properties (22)

`post_id`	70,035,304
`author`	steem-ua
`permlink`	re-another-cryptocurrency-malware-found-on-google-play-store-b3b083cdba241-20190211t231357z
`category`	malware
`json_metadata`	{"app":"beem\/0.20.18"}
`created`	2019-02-11 23:13:57
`last_update`	2019-02-11 23:13:57
`depth`	1
`children`	0
`net_rshares`	0
`last_payout`	2019-02-18 23:13:57
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 SBD
`curator_payout_value`	0.000 SBD
`pending_payout_value`	0.000 SBD
`promoted`	0.000 SBD
`body_length`	709
`author_reputation`	23,203,609,903,979
`root_title`	"Another Cryptocurrency Malware Found on Google Play Store"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 SBD
`percent_steem_dollars`	10,000

@cryptopie · Feb 12 '19

$0.08

It is the reason I do not download much for the fear of such malwares @horpey

👍 horpey

`post_id`	70,066,957
`author`	cryptopie
`permlink`	re-horpey-another-cryptocurrency-malware-found-on-google-play-store-b3b083cdba241-20190212t143252833z
`category`	malware
`json_metadata`	{"tags":["malware"],"users":["horpey"],"app":"steemit\/0.1"}
`created`	2019-02-12 14:32:54
`last_update`	2019-02-12 14:32:54
`depth`	1
`children`	1
`net_rshares`	155,170,670,213
`last_payout`	2019-02-19 14:32:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.059 SBD
`curator_payout_value`	0.019 SBD
`pending_payout_value`	0.000 SBD
`promoted`	0.000 SBD
`body_length`	77
`author_reputation`	1,663,838,276,944,837
`root_title`	"Another Cryptocurrency Malware Found on Google Play Store"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 SBD
`percent_steem_dollars`	0
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
horpey	0 B		155,170,670,213	100%

@horpey · Feb 12 '19

Yeah, one has to be extremely careful nowadays with app downloading.

properties (22)

`post_id`	70,081,731
`author`	horpey
`permlink`	re-cryptopie-re-horpey-another-cryptocurrency-malware-found-on-google-play-store-b3b083cdba241-20190212t214101678z
`category`	malware
`json_metadata`	{"tags":["malware"],"app":"steemit\/0.1"}
`created`	2019-02-12 21:41:06
`last_update`	2019-02-12 21:41:06
`depth`	2
`children`	0
`net_rshares`	0
`last_payout`	2019-02-19 21:41:06
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 SBD
`curator_payout_value`	0.000 SBD
`pending_payout_value`	0.000 SBD
`promoted`	0.000 SBD
`body_length`	68
`author_reputation`	224,445,607,823,384
`root_title`	"Another Cryptocurrency Malware Found on Google Play Store"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 SBD
`percent_steem_dollars`	10,000