This was followed by Processing Photo, which had 5,00,000 downloads. Most of the 5.8 million downloads were from an app called PIP Photo. SEE ALSO: The 7 Best Zoom And Work-From-Home Moments Of 2021, So Farįive malware variants hidden within the apps were identified, all of which used an equivalent JavaScript code and configuration file formats to steal user data. The apps could also steal cookies from the authorization session. This script was wont to hijack login credentials, which were then skilled the app and to the command server. The trojans loaded real Facebook login pages with fields for usernames and passwords, but they also loaded JavaScript received from the C&C server into an equivalent WebView. They also offered an option of disabling in-app ads by simply logging in using a Facebook account. Web ( via Ars Technica) report, like many malicious apps, these apps performed their advertised functions, like photo editing, exercise and training, horoscopes, and removing junk files from a phone. The worrying part is that they were downloaded a whopping 5.8 million times, combined!Īs per a Dr. Well, a fresh list of nine apps now join that list and Google has just removed them from the Play Store for stealing users’ Facebook login details.

We’re often told to exercise caution when it comes to installing app outside of the Play Store, but Google's Android marketplace has seen a fair share of apps trying to find loopholes in its anti-malware mechanisms to dupe users and robbing personal data.

Play store log out