Android apps that can steal your Facebook password have been download more than 5.8 million times worldwide. Theis culprits have been caught trying to steal users’ Facebook passwords, and they did so by using Facebook’s own login page.
Alot of Facebook-phishing apps have been removed from the Google Play Store. But they still have safe installs on user devices who have downloaded them. One of them, called PIP Photo, was downloaded more than 5 million times. And together all these have been downloaded about 800,000 times.
Android apps that can steal your Facebook password
All the apps mentioned in the report offered real features, causing the unsuspecting users to trust them. They even allowed users to unlock more features and disable in-app advertisements by logging into their Facebook accounts.
These apps exploited the widespread use of Google and Facebook login. Something that is offered by many apps and games – to steal passwords of unsuspecting users. “After receiving the necessary settings from one of the C&C servers upon launch, they loaded the legitimate Facebook web page.
After that, this JavaScript, using the methods provided through the JavascriptInterface annotation, passed the stolen login and password to the trojan applications, which then transferred the data to the attackers’ C&C server.
And when the victim logged into their account, the trojans also stole cookies from the current authorization session. Those cookies were also sent to cybercriminals.”
The Trojan apps
Many Android apps have the same name, you’ll want to make sure you’re deleting the right one. From the app’s page in Settings, click on Advanced > App Details. The App Details should take you to the app’s page in Google Play, which will either list the developer name (listed above) or take you to a deleted listing.
- App Lock Keep, developer Sheralaw Rence, more than 50,000 downloads
- App Lock Manager, developer Implummet col, more than 10 downloads
- Horoscope Daily, developer HscopeDaily momo, more than 100,000 downloads
- Horoscope Pi, developer Talleyr Shauna, more than 1,000 downloads
- Inwell Fitness, developer Reuben Germaine, more than 100,000 downloads
- Lockit Master, developer Enali mchicolo, more than 5,000 downloads
- PIP Photo, developer Lillians, more than 5 million downloads
- Processing Photo, developer chikumburahamilton, more than 500,000 downloads
- Rubbish Cleaner, developer SNT.rbcl, more than 100,000 downloads