Android users, these 9 apps are stealing Facebook users' logins and passwords

Gadgets Now Bureau04 Jul, 2021, 08:54AM IST

Doctor Web’s malware analysts have discovered 10 malicious apps that steal Facebook users' logins and passwords. Of these, 9 apps were available on Google Play Store. "These stealer trojans were spread as harmless software and were installed more than 5,856,010 times," as per the security analysts. Google removed these 9 malware apps after they were reported to the company.

These trojan apps used a special mechanism to fool their victims. After receiving the necessary settings, they loaded the legitimate Facebook web page https://www.facebook.com/login.php into WebView. Next, they loaded JavaScript received into the same WebView. This script was then directly used to highjack the entered login credentials. After that, this JavaScript, using the methods provided through the JavascriptInterface annotation, passed stolen login and password to the trojan apps, which then transferred the data to the attackers’ server. After the victim logged into their account, the trojans also stole cookies from the current authorization session. Those cookies were also sent to cybercriminals.

Here's over to 9 dangerous app along with their developer names and the number of installs.

19

PIP Photo

29

Processing Photo

39

Rubbish Cleaner

49

Horoscope Daily

59

Inwell Fitness

69

App Lock Keep

79

Lockit Master

89

Horoscope Pi

99

App Lock Manager

TRENDING SLIDESHOWS

13

9

9

9

10