These 9 popular Android apps stole millions of Facebook passwords

The apps have a total of 5.8 million downloads.

Georgia Dixon
Digital Content Editor
Read More
July 06, 2021
1 min read
Malicious apps on a Google Android phone

The Google Play Store is, unfortunately, no stranger to malicious app listings, from February's compromised QR code scanner to a massive 56 malware-infected apps in March. The most recent breach, reported by Ars Technica, has led to Google removing nine apps (with a total of 5.8 million downloads between them) for reportedly stealing users' Facebook login information.

The nine apps in question appeared to offer a legitimate, functional service in order to gain users' trust before stealing their data via a genuine-looking Facebook login form. The trojan malware also stole users' cookies and sent them to cybercriminals. Malware analysts Doctor Web made the discovery and reported it to Google, who promptly removed the malicious apps.

If you recognise any of the below apps, you may find they have already been deleted from your device. If not, you can delete them manually.

Ironically, three of the nine malicious apps (App Lock Keep, App Lock Manager and Lockit Master) were touted as security apps. There were also two photo editing apps (PIP Photo and Processing Photo), two horoscope apps (Horoscope Daily and Horoscope Pi), one file cleaner app (Rubbish Cleaner) and one workout app (Inwell Fitness).

For many people, the appeal of Android is its open-source nature and customisability. However, in recent years, it's become the operating system's Achilles heel - one which Apple has happily taken advantage of with its increasingly strict App Store and privacy protections.

Short of switching from Android to iPhone, the best thing Android users can do to protect themselves from damaging software is to be wary when downloading and updating apps and games (particularly those supported by ads). It's also important to ensure you update your device's operating system as soon as updates become available, as many contain essential security patches.

The latest breach is also a reminder that, even if an app has millions of downloads, it doesn't necessarily mean it's safe. If you suspect you may have been hit by a scam, check out this great article on Verified.org about reporting scams in Australia.

Georgia Dixon
Written by
Georgia Dixon
Georgia Dixon has over seven years' experience writing about all things tech, entertainment and lifestyle, with bylines in TechLife magazine, 7NEWS and Stuff.co.nz. In her spare time, you'll find her playing games and daydreaming about good food, wine, and dogs.

Related Articles

Sony WHXM5 comparison header
Sony WH-1000 XM5 vs XM4: New looks, more microphones
Here's a quick summary of the biggest upgrades coming to Sony’s next set of noise-cancelling...
Daily Deals - Galaxy Z Flip 3
Daily Deals: Discounts on headphones, cameras and more
Your daily dose of the best tech deals available in Australia.
Commbank app
CommBank customers get an exclusive discount on these NBN plans
Dollarmites assemble! More Telecom has partnered with the Commonwealth Bank to give customers 30% off...
Galaxy A53 5G
Samsung Galaxy A53 review: Just right
Samsung's Galaxy A53 5G is a good phone for a good price.