These 9 popular Android apps stole millions of Facebook passwords

The apps have a total of 5.8 million downloads.

Georgia Dixon
Digital Content Editor
Read More
July 07, 2021
1 min read

We are committed to sharing unbiased reviews. Some of the links on our site are from our partners who compensate us. Read our disclosure policies to learn more.

Malicious apps on a Google Android phone

The Google Play Store is, unfortunately, no stranger to malicious app listings, from February's compromised QR code scanner to a massive 56 malware-infected apps in March. The most recent breach, reported by Ars Technica, has led to Google removing nine apps (with a total of 5.8 million downloads between them) for reportedly stealing users' Facebook login information.

The nine apps in question appeared to offer a legitimate, functional service in order to gain users' trust before stealing their data via a genuine-looking Facebook login form. The trojan malware also stole users' cookies and sent them to cybercriminals. Malware analysts Doctor Web made the discovery and reported it to Google, who promptly removed the malicious apps.

If you recognise any of the below apps, you may find they have already been deleted from your device. If not, you can delete them manually.

Ironically, three of the nine malicious apps (App Lock Keep, App Lock Manager and Lockit Master) were touted as security apps. There were also two photo editing apps (PIP Photo and Processing Photo), two horoscope apps (Horoscope Daily and Horoscope Pi), one file cleaner app (Rubbish Cleaner) and one workout app (Inwell Fitness).

For many people, the appeal of Android is its open-source nature and customisability. However, in recent years, it's become the operating system's Achilles heel - one which Apple has happily taken advantage of with its increasingly strict App Store and privacy protections.

Short of switching from Android to iPhone, the best thing Android users can do to protect themselves from damaging software is to be wary when downloading and updating apps and games (particularly those supported by ads). It's also important to ensure you update your device's operating system as soon as updates become available, as many contain essential security patches.

The latest breach is also a reminder that, even if an app has millions of downloads, it doesn't necessarily mean it's safe. If you suspect you may have been hit by a scam, check out this great article on Verified.org about reporting scams in Australia.

Georgia Dixon
Written by
Georgia Dixon
Georgia Dixon has over seven years' experience writing about all things tech, entertainment and lifestyle, with bylines in TechLife magazine, 7NEWS and Stuff.co.nz. In her spare time, you'll find her playing games and daydreaming about good food, wine, and dogs.

Related Articles

Nothing Phone 1 white
Nothing CEO Carl Pei teases a more “premium” Phone 2
Nothing is finally saying something about its next device.
Shang Chi: Legend of the Ten Rings
How to watch Shang-Chi and the Legend of the Ten Rings online in Australia
Jump into the ring with Shang-Chi and the Legend of the Ten Rings on Disney...
Nvidia GeForce RTX 4080 graphics card
Nvidia GeForce RTX 4080 graphics card review
We've updated our review of the RTX 4080 to include benchmarks for the RTX 4080...