UPDATED 00:11 EDT / JUNE 13 2018


Cryptocurrency malware now targeting Amazon devices as Monero mining surges

Amazon.com Inc.’s Fire devices are being targeted by a new variant of cryptomining malware as a new report shows that mining for Monero, the cryptocurrency of choice for hackers, is surging.

The malware is a variant of the ADB.Miner malware that previously targeted stock Android devices (Amazon runs a customized version of Android). It uses the same infection path, the Android Debug Bridge, to target Amazon Fire television and Fire TV stick devices.

The distribution method for the mining malware is via third-party website-based app stores that Amazon users visit to obtain apps unavailable from the Amazon’s own app store, which they’re restricted to using by default. Amazon doesn’t allow access to Google Play.

Once a user downloads an app infected with ADB.Miner, the malware goes to work, using Coinhive script to mine Monero in the background. Both Amazon devices are not known as high-end hardware, meaning that the first time users may realize they have been infected is a noticeable reduction in performance.

The malware has a second infection process, a worm function, in that it seeks out other devices on a network it can infect.

That hackers are targeting Amazon Fire devices does not come as a great surprise, since mining for Monero continues to surge. Security researchers at Palo Alto Networks Inc. have published a new report stating that there has been a massive surge in cryptomining malware, having discovered 629,126 cryptomining malware samples recently, with the vast majority mining for Monero.

Monero miners, described as holding an “incredible monopoly,” were found in 531,666 samples, an 84.5 percent market share.

Counting the top 10 Monero mining wallets linked to the malware, the researchers found that the malware linked to those wallets alone had mined 798,613.33 Monero to date, about 5 percent of all known Monero in circulation.

That amounts to a current value of just over $100 million as of midnight EDT. The number in total is likely to be far higher again, with the total number of Monero wallets detected coming in at 2,341.

Picture: Hedwig Storch/Wikimedia Commons

A message from John Furrier, co-founder of SiliconANGLE:

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and soon to be Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.

Join Our Community 

We are holding our second cloud startup showcase on June 16. Click here to join the free and open Startup Showcase event.


“TheCUBE is part of re:Invent, you know, you guys really are a part of the event and we really appreciate your coming here and I know people appreciate the content you create as well” – Andy Jassy

We really want to hear from you. Thanks for taking the time to read this post. Looking forward to seeing you at the event and in theCUBE Club.