Facebook says malicious apps are stealing login credentials

Meta is warning 1 million Facebook users that their account information may have been compromised by third-party apps from Apple or Google's stores. In a new report, the company's security researchers say that in the last year they've identified more than 400 scammy apps designed to hijack users' Facebook account credentials.

The applications are disguised as games, photo editors, and health and lifestyle services. Users were typically prompted to login into their Facebook account upon downloading the apps, which would allow the malware to steal their login information.

All the identified malware apps have since been removed from the Google Play Store and Apple App Store, and Meta said it is alerting people whose information might have been unknowingly compromised.

Both companies have struggled to police their official app stores, and each faces its own version of the same challenges. For Google, Android's open ecosystem means that users can download apps from third-party app stores beyond Google's control. This makes it even more problematic when malicious apps show up in Play, but it also gives users leeway to source apps where they want to (ideally, if they know they can trust a particular developer). The closed iOS ecosystem has far fewer threats from rogue apps outside the App Store, but as a result all users must get their apps from Apple, making it even more valuable for attackers to sneak their malicious apps in.

Read more -here-

• Dropbox breach exposes customer credentials, authentication data
• Google: Passkey authentications top 1 billion across 400 million accounts
• FTC fines Razer for misrepresenting COVID masks as N95s
• FCC fines Verizon, AT&T other major carriers nearly $200 million for sharing customer data
• Federal regulators accuse Amazon executives of deleting messages
• FCC restores net neutrality rules