According to a new report by Dr.Web, Google has removed nine Android apps from the Play Store, as they were attempting to steal users’ Facebook passwords.
These Android apps will try to steal your Facebook password, it may be wise to remove them
Now, even though those apps have been removed, it’s possible that you still have them on your phone. Therefore, it may be wise to uninstall them as soon as possible. These apps have been downloaded 5.8 million times (all together), before being removed.
The apps in question are: Processing Photo, App Lock Keep, Rubbish Cleaner, Horoscope Daily, Horoscope Pi, App Lock Manager, Lockit Master, Inwell Fitness, and PiP Photo.
Now, all of these apps function as you’d expect, but they require you to log in by using your Facebook account. Once you do that, a trojan malware built into these apps would activate and steal your Facebook password.
This trojan can be tweaked to do even more damage
Dr.Web does, of course, recommend you to uninstall these apps, if you have any of them on your phone. This trojan can always be tweaked, and do even more damage than it originally does.
If you had any of these apps on your phone, make sure to change your Facebook password, just to be sure. Also, if you’re using that password on any other service, it may be wise to change it there as well.
You need to be really careful when downloading apps that are somewhat unknown. User reviews can often point towards a scam, but sometimes not even that helps, as many such apps do work like normal.
Malware usually resides in horoscope apps, photo / video editing apps, and cache cleaner-type apps. That’s not a general rule, but that’s what we see most often, so be extra careful with such applications.
In the case of these apps, the required Facebook login was a dead giveaway. There is usually a choice from a number of services, or an option to register a new account with the company, but these ones did require a Facebook login to work.