Andy hides a cryptocurrency miner from you

Android emulators are designed to run on a computer and can simulate the environment of Google's operating system. Thanks to them you can run applications, games and do almost anything else you would do on an Android device. Andy OS is one of the most popular solutions in this style, something hackers have taken advantage of.

The popular Android emulator Andy OS contains a cryptocurrency miner that works transparently to the user

An Andy OS user noted that the performance of the software had decreased and that the CPU temperatures were higher than normal. After a little investigation, the user was able to trace the possible source of the problem, a process called 'updater.exe' that is apparently installed on the host system along with Andy OS.

We recommend reading our post about Ducky brings its new mechanical keyboards Ducky Shine 7, Ducky One 2 RGB and Ducky One 2 Mini to Computex 2018

When executing a scan on the file, it has been discovered that it hides a cryptocurrency miner that works in the background, transparently to the user. According to a representative of Andy, the operating system uses blockchain technology, which is the reason why it is detected as a threat. According to another source, the miner is not part of the operating system and is installed through a third-party installation file.

It appears that the user was excluded, censored and prohibited when contacting the company for clarification. It is still early to draw conclusions and a culprit, meanwhile, it is best to stay away from the operating system and find an alternative if you need to make use of Android features. If you have previously downloaded Andy OS and want to remove the infection, you can find the instructions at this Reddit link.

Bleepingcomputer font