25 apps on Google Play that disguise themselves as games, utilities and educational apps. Under the hood they turn victims mobile device into cryptocurrency churning rigs. Most of the apps were found to have embedded code from Coinhive, a JavaScript implementation to mine Monero. Monero has been the authors choice of cryptocurrency for all these apps as it offers sufficient privacy to keep the source, destination, and the amount mined hidden. These apps use CPU throttling to limit CPU usage by mining, and thus avoid the usual pitfalls: Device overheating, high battery drain, and overall device sluggishness.”]
Source: https://news.sophos.com/en-us/2018/09/24/cryptojacking-apps-return-to-google-play-market/