If the login information is stolen, attackers could potentially gain full access to a person’s account and do things like message their friends or access private information.
If they enter their credentials, the malware steals their username and password. When a person installs the malicious app, it may ask them to “Login With Facebook” before they are able to use its promised features. To cover up negative reviews by people who have spotted the defunct or malicious nature of the apps, developers may publish fake reviews to trick others into downloading the malware. Malicious developers create malware apps disguised as apps with fun or useful functionality - like cartoon image editors or music players - and publish them on mobile app stores. We are also alerting people who may have unknowingly self-compromised their accounts by downloading these apps and sharing their credentials, and are helping them to secure their accounts.
We’ve reported these malicious apps to our peers at Apple and Google and they have been taken down from both app stores prior to this report’s publication. This is a highly adversarial space and while our industry peers work to detect and remove malicious software, some of these apps evade detection and make it onto legitimate app stores.
Android portal 2 wallpaper update#
Today, we’re sharing an update on our work against malicious mobile apps available in the official Apple and Google app stores that are designed to compromise people’s Facebook accounts.
0 kommentar(er)
