These popular Android apps were secretly scraping Facebook login details

Android users have again been warned to up their security awareness after more malicious apps were pulled from the Google Play Store.

Overall, 25 Android apps were removed after they were found to be targeting user Facebook login information, with apps posing as mobile games, video editors, wallpaper apps and fitness trackers.

The malicious apps, some of which had been on the Play Store for more than a year, had been downloaded more than 2.34 million times in total, warned security firm Evina, however users should no longer be at risk thanks to Google's own security protections.

Android security

In its report, Evina noted that the 25 apps all originated from the same cybercrime group, and despite offering some basic functionalities, all in fact hid malicious actions.

The researchers found that the apps contained code that was able to detect recently opened services on the target device, including what apps were open in the foreground and background.

If Facebook was open in the foreground, the malicious app would launch a web browser window containing a fake Facebook login page overlaying on top of the real app, attempting to try and trick users into entering their details into the fake page, which would then send these details off to a remote server.

Evina reported the 25 malicious apps to Google at the end of May, with the search giant taking the apps off the Play Store this week after confirming the findings. Google says it disables any apps removed from the Play Store on any user devices that may have downloaded them, with its Play Protect service notifying affected users of any issues.

The news comes soon after tens of thousands of dangerous Android apps were found to be putting mobile users at heightened risk of fraud and cyberattack, suggesting hackers are consistently able to find ways to get around Google's vetting system.

Via ZDNet

How It works

Search Crack for

Latest IT News

Aug 8
Most of us are open to leaving the office behind forever.
Aug 8
Google is phasing out its original website builder so users must move their sites to new Google Sites by September of next year.
Aug 7
Reactions, filters, and noise cancellation all introduced in latest Zoom update.
Aug 7
Integrated payments solutions from SAAS providers can help, but time and money is being lost while firms chase cash.
Aug 7
Google has announced a host of new updates coming to Google Docs, Sheets and Slides on mobile.
Aug 7's parent company Automattic has used P2 internally among its fully distributed workforce for years.
Aug 6
Windows 10 usage continues to grow, but older editions still cling on.

Latest cracks