Warning: Trojans are hidden behind these Android apps


Android users should check their apps immediately. Camouflaged Trojans have crept into the Play Store and steal Facebook user data.

They have been downloaded millions of times from the Google Play Store. What nobody suspected: malware that steals Facebook user data is hidden behind certain apps for Android devices.

There are nine applications behind which camouflaged Trojans are hiding. They made it to the official Google Play Store and, according to security experts, were downloaded 5.8 million times.

After installing the app, numerous users were asked to log in to Facebook in order to hide advertisements or to take advantage of other advantages. When registering via Facebook, however, the logins were recorded. Numerous access data could thus be transmitted to the attacker’s server.

Trojans are hidden behind these apps

Android users should therefore quickly check whether they have downloaded the following apps on their device or are even using these apps:

  • Processing Photo
  • App Lock Keep
  • Rubbish Cleaner
  • Horoscope Daily
  • Horsocope Pi
  • App Lock Manager
  • Lockit Master
  • Inwell Fitness
  • PIP Photo

If you have one of these nine apps installed, you should delete them immediately. Google has already announced that the apps have been deleted from the Google Play Store and the developers have been banned, but the number of downloads of these apps has already been immense.

How do the hackers work?

After the request for a Facebook login and the associated advantages, the Facebook login was initially actually loaded. However, the hackers also added JavaScript code to the WebView component. The login data could therefore also be logged. A user should have little suspicion. Nevertheless, the attackers still have the opportunity to gain access to a large amount of data via Facebook.

The dangerous apps were discovered by Dr. Web. Google was able to react quickly afterwards, but Android users were asked to check or delete their apps and, if necessary, to change their Facebook login data as quickly as possible.


Source: RSS Feed: Connect – News by www.connect.de.

*The article has been translated based on the content of RSS Feed: Connect – News by www.connect.de. If there is any problem regarding the content, copyright, please leave a report below the article. We will try to process as quickly as possible to protect the rights of the author. Thank you very much!

*We just want readers to access information more quickly and easily with other multilingual content, instead of information only available in a certain language.

*We always respect the copyright of the content of the author and always include the original link of the source article.If the author disagrees, just leave the report below the article, the article will be edited or deleted at the request of the author. Thanks very much! Best regards!