Google deleted them from the Play Store, after it was discovered that nine android apps stole users’ Facebook login details. All of the apps were authentic and were downloaded over 5 million times.
The apps have titles that sounded like commonplace utility apps. Rubbish Cleaner and Horoscope Daily are two of them. According to research, the infected apps had a total of 5.9 million downloads on Google Play, with PIP Photo alone having 5.8 million downloads, and contained five different malware strains. Google had already removed three children’s apps due to privacy issues.
Dr. Web’s Malware specialists uncovered malicious apps like Processing Photo, App Lock Keep, Rubbish Cleaner, Horoscope Daily, Horoscope Pi, App Lock Manager, Lockit Master, Inwell Fitness, and PIP Photo. After providing users with the opportunity to deactivate adverts by logging in with their social media accounts, these apps allegedly acted as a trojan virus and stole users’ Facebook login details.
Read: Google Is Spying On You!
Users were duped by these android apps
They displayed an exact imitation of Facebook’s login page. Instead, the apps used a JavaScript command to steal their login information. The apps also stole browser cookies from the authorization session, according to reports. There were several malware variations, all of which allegedly used the same JavaScript code to steal user information. Research stated that three of the malware types are native Android apps, while two others were made using Google’s Flutter SDK.
Users should avoid downloading any programme from an unknown developer, regardless of how popular the app is. PIP Photo got the most downloads in this example, with 5.8 million, followed by Processing Photo with 500,000. Anyone who has downloaded these apps should check their device and Facebook account for unusual activity.
