ChainBleedv0.1 · open intel
← back to feed·RUG2021-07-09 · 4y ago
Incident · SLOWMIST

Android application

Scam
Estimated loss
$350.0K
VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
▰ METHOD
RUG
RUGBYTECODE CATCHABLEAI SCANNABLE
Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

Lookout Threat Lab security researchers exposed more than 170 Android applications, and the number of deceived users exceeded 93,000. Among them, 25 applications managed to evade the Google Play Store detection and successfully launched, but this is mainly because they do not involve any malicious operations, and may even be purely to fool users. Lookout security researchers pointed out that these counterfeit applications belong to the BitScam and CouldScam series respectively, claiming to provide cloud-based cryptocurrency mining services that can aggregate the computing power of users' mobile devices and share mining revenue. These apps are not free, and various additional payment excuses such as subscriptions and upgrades will be made. Prices range from 12.99 to 259.99 US dollars, and cryptocurrencies such as BTC or ETH are accepted as payment methods. LookoutThreatLab estimates that these malware creators defrauded 300,000 U.S. dollars through illegal sales and 50,000 U.S. dollars in cryptocurrency through fake payments and upgrade services. Attack method (per SlowMist): Scam. Reported loss: $ 350,000.

Primary source
https://blog.lookout.com/lookout-unearths-android-crypto-mining-scams?utm_source=PR&utm_medium=WEB&utm_campaign=WW-US-MU-MU-MU-P_NON_CryptoScams
Sourced from
slowmist
Technical record
chain
protocol
Android application
bug_class
rug
date_occurred
2021-07-09
loss_usd
$350,000
source_id
sm:android-application::2021-07-09
Related — same bug class· rug
2026-05-07
1mo ago
BSC
White Eagle
Rug pull / exit scam (X account deleted, site offline)
rug
$65.6K
UNRATED
2025-11-20
6mo ago
ETH
DMT 空投(@dexmaxai)
Phishing Attack
rug
$130.0K
UNRATED
2025-09-26
8mo ago
HYPERL
HyperVault
Drain Vaults
rug
$3.60M
UNRATED
2025-09-26
8mo ago
HyperVault
Rug Pull
rug
$3.61M
UNRATED
2025-09-23
8mo ago
CORE
Corepound
Drained Contracts
rug
$430.0K
UNRATED
2025-09-23
8mo ago
Corepound
Rug Pull
rug
$400.0K
UNRATED
ChainBleed — live web3 threat intelligence