Meta security researchers have identified over 400 iOS and Android apps that should be removed from smartphones immediately. They target credentials via phishing. The apps disguise themselves as games, VPN, flashlight or health apps.
Version:4/32/15
Languages:German English French
License:freeware
Platforms:Linux
iOS and Android: 400+ malicious apps detected
According to its own statements, the malware unit from Meta has the same more than 400 malicious apps detected, which were offered in Google’s Play Store and Apple’s App Store. According to Meta, it is difficult to estimate how many users have downloaded it. However, the group states that, as a precaution, one million potentially affected users would be “notified”.
The apps are targeting Facebook logins. Once launched, they ask users for their Facebook username and password. Supposedly, more functions in the app should be unlocked. If users do not suspect anything, they lose access to their Facebook account. Spam is then spread to friends in their own profile (source: Facebook).
Apparently the apps managed to do that Bypassing the security measures of the Play Store and the App Store. Meta reports that 42.6 percent of malicious apps posed as photo editors, while 11.7 percent acted as rogue VPNs.
On Android, these apps are affected, among others:
- Apex Race Game
- Zodiac Horoscope
- Cool photo editor
- Beauty Camera
- YouToon – AI Cartoon Effect
A selection of iOS apps:
- Business Suite Ads
- FB Business Support
- Meta Optimizer
- Business Manager Overview
- Ads Business Suite
In the video: How to protect your Android phone from malware.
Google and Apple are throwing out apps
The affected apps can no longer be found in the app stores. According to Google, you have the majority of apps already removed before the meta report. In addition, the group refers to Google Play Protect, which blocks the apps on Android phones. Apple says it’s removing all apps and has “zero tolerance for fraud and malicious activity.”