Dear Visitor,

Our system has found that you are using an ad-blocking browser add-on.

We just wanted to let you know that our site content is, of course, available to you absolutely free of charge.

Our ads are the only way we have to be able to bring you the latest high-quality content, which is written by professional journalists, with the help of editors, graphic designers, and our site production and I.T. staff, as well as many other talented people who work around the clock for this site.

So, we ask you to add this site to your Ad Blocker’s "white list" or to simply disable your Ad Blocker while visiting this site.

Continue on this site freely
  HOME     MENU     SEARCH     NEWSLETTER    
THE ENTERPRISE SECURITY SUPERSITE. UPDATED 14 MINUTES AGO.
You are here: Home / Cybercrime / Calendar 2 Vanishes from App Store
Mining Misfire: Calendar 2 Vanishes from App Store
Mining Misfire: Calendar 2 Vanishes from App Store
By Darren Allan Like this on Facebook Tweet this Link thison Linkedin Link this on Google Plus
PUBLISHED:
MARCH
13
2018
A popular calendar app for the Mac has disappeared from Apple's App Store after it was found to be mining cryptocurrency without the user's permission.

We should note right off-the-bat that the app in question, Calendar 2, was upfront about its usage of the Mac's CPU for mining cryptocurrency (Monero), and this was actually concocted as a (rather novel) alternate payment method to unlock premium features.

In other words, Calendar 2 had both a free version and a version with advanced features that could be unlocked via a one-off or subscription payment -- but if you didn't fancy either of the former, you could unlock the additional features by giving the app permission to use your processor to mine cryptocurrency.

The problem was that even if the user was running the free version of the app, and hadn't given said permission, the software was still mining cryptocurrency -- and this happened thanks to a bug, the developer (Qbix) explained.

As Apple Insider reports, Qbix founder Gregory Magarshak also admitted that a second bug existed which caused the mining process to consume more CPU cycles than the intended 10-20% of processor usage.

Following these discoveries, Magarshak issued a statement to say he was removing the mining feature from the app, but Calendar 2 subsequently got yanked down from the Mac App Store (and remains unavailable at the time of writing).

It's not clear whether the developer removed the app or Apple pulled the software. What also isn't clear is Apple's stance on this potential new way of paying to unlock premium features.

Mining Minefield

Certainly this episode points out the potential dangers in running such a cryptocurrency mining scheme to unlock an app's advanced features, most notably the possibility of mining happening without the user's consent or knowledge.

The other potential bugbear here is the fact that the miner was grabbing more than the intended processor usage, and policing that could be a tricky matter. That said, if loads of CPU resources are being erroneously grabbed, the impact on the Mac's performance will obviously become quite noticeable.

Indeed, surely Apple will be concerned if this sort of mining payment method is in danger of appearing to make its computers seem like they're running sluggishly.

Still, there will doubtless be attractions for some in what's certainly an innovative way to get premium features for what seems like a very small outlay, but we have to bear in mind that it is a continuous outlay (and the increased level of CPU usage will draw extra power which will be reflected on your electricity bill).

We'll just have to see what happens in the future with Calendar 2, and more broadly, whether Apple will take a stand against this sort of scheme in its terms for developers hoping to get their wares on the App Store.

Let's not forget that all this, of course, is happening against a backdrop of increasingly prevalent crypto-mining malware.

© 2018 T-break Tech under contract with NewsEdge/Acquire Media. All rights reserved.

Image credit: iStock.

Tell Us What You Think
Comment:

Name:

Like Us on FacebookFollow Us on Twitter
MORE IN CYBERCRIME
ENTERPRISE SECURITY TODAY
NEWSFACTOR NETWORK SITES
NEWSFACTOR SERVICES
© Copyright 2018 NewsFactor Network. All rights reserved. Member of Accuserve Ad Network.