Android users, these 9 apps are stealing Facebook users’ logins and passwords

Doctor Web’s malware analysts have discovered 10 malicious apps that steal Facebook users’ logins and passwords. Of these, 9 apps were available on Google Play Store. “These stealer trojans were spread as harmless software and were installed more than 5,856,010 times,” as per the security analysts. Google removed these 9 malware apps after they were reported to the company.

These trojan apps used a special mechanism to fool their victims. After receiving the necessary settings, they loaded the legitimate Facebook web page https://www.facebook.com/login.php into WebView. Next, they loaded JavaScript received into the same WebView.