According to Meta Platforms, it will inform about 1 million Facebook users that their login information may have been stolen as a result of security flaws in apps downloaded from Apple and Google app stores.
.jpg)
The business revealed on Friday that it had discovered more than 400 nefarious Android and iOS apps this year that prey on internet users in an effort to steal their login credentials. In order to expedite the removal of the apps, according to Meta, it alerted both Apple and Google to the problem.
The apps worked by disguising themselves as photo editors, mobile games or health trackers, Facebook said.
Apple claimed that 45 of the 400 problematic apps had been taken down from the App Store. According to a representative, Google uninstalled all of the fraudulent apps in question.
Cybercriminals will employ similar themes to dupe users and steal their accounts and information since they are aware of how popular these kinds of apps are, according to David Agranovich, director of global threat disruption at Meta. It's likely that an app has hidden agendas if it makes unrealistic promises, such as exclusive functionality for another platform or social media site.
For instance, a typical fraud would start once a consumer downloaded one of the harmful apps. The user would be tricked into supplying their username and password since the software would need a Facebook connection to perform any tasks that went beyond the bare minimum. After that, users might submit an updated photo, for instance, to their Facebook account. But by granting the app's creator access, they unintentionally compromised their account.
In order to prevent being "re-compromised," Meta committed to share advice with potential victims on how to recognize unreliable apps that steal login information from Facebook or other accounts.
According to Agranovich, the malicious activity took place outside of Meta systems, and not all 1 million users' passwords were necessarily exposed.
Comments
Post a Comment