The application named 2048buntu, a clone of the popular 2048 game, is packaged as an Ubuntu Snap - a relatively new application format on the Ubuntu operating system.
Alert: Malicious Package Detected on Ubuntu Snap Store
According to GitHub user Tarwirdur, 2048buntu contains a cryptocurrency mining application disguised as 'systemd' daemon, along with an init script to facilitate startup.
Cryptocurrency mining code for Bytecoin (BCN) linked to user account with email address [email protected].
As reported, the Ubuntu Snap Store team has removed the application and other snap packages from the app developer, stating they are 'under further investigation.'
Due to Ubuntu Snap Store not displaying installation numbers, the exact count of affected users cannot be determined.
Any user can create and upload snap packages to Ubuntu Snap Store. Snap packages sent are not security-checked, similar to app packages submitted to iOS App Store and Google Play Store.
With the discovery of malicious packages, Ubuntu Snap Store inadvertently joins the list of app stores affected by harmful third-party content, alongside Chrome Web Store, Google Play Store, Apple App Store, and Windows Store.
It's advisable to install antivirus software like Avast or KIS for your system. Avast is highly rated; check out how to install Avast on Ubuntu or Linux here.
Despite the convenience of Always Connected feature in some computers, criticisms have arisen about the success of Windows 10 Always Connected PCs due to their high prices and not meeting user expectations in terms of efficiency.
