We here at the SDC are always on the lookout for new ways to help our members stay safe, whether it’s through sharing tips and tricks or warning you about possible scams.

That’s why we’re bringing this concerning news to your attention today – over 400 iPhone and Android apps were found to contain hidden malware, which could be used to steal login information to Facebook and other social media platforms.

Upon discovering the threats, tech giants such as Apple and Google, security researchers, policymakers and the team at Facebook have all collaborated to help prevent malicious apps from infiltrating people’s devices.

This is the reason why Meta — the company that owns Facebook, Instagram, and WhatsApp — has issued a warning to its users to beware of any newly-downloaded apps that may come across as ‘fun and functional’.

David Agranovich, Meta threat disruption director, stated that the developers of the malicious apps have been posting fake reviews of their own software online to encourage other users to download their programs.

The apps are disguised as picture editors, games, and VPN services to entice people to download them. Credit: Meta.​

He said that to deceive users into downloading them, these programmes were listed on the Google Play Store and Apple's App Store and disguised as picture editors, games, VPN services, business apps, and other utilities.

Mr Agranovich added: 'Because these apps were accessible in third-party app stores, we're encouraging people to be cautious when downloading a new app that asks for social media credentials.'

'Cybercriminals know how popular these types of apps are and use these themes to trick people and steal their accounts and information.'

The Cybersecurity team also provided a list of questions you should ask yourself before downloading any applications.

• Does it work without your information? Be suspicious of an app that will not let you access its functions without your Facebook information.
• Is the app reputable? Check the download count, ratings, and reviews, and be on the lookout for any negative ones.
• Does it do what it says in the description? Ensure the app provides the function it promises.

Meta also suggested deleting the app if you believe that you have downloaded one of the suspicious programmes.

The company said: 'We recommend that you delete the app from your device immediately and follow the following instructions to secure your accounts.'

It was advised to come up with unique, strong passwords for your accounts, refrain from using the same password on several websites, enable two-factor authentication, and set notifications so that you'll be informed if someone tries to access your account.

'Be sure to review your previous sessions to determine which devices have access to your account,' Agranovich.

'We also encourage people to report malicious applications that compromise Meta accounts to us through our Data Abuse Bounty program.'

A full list of the malicious apps can be found here.

If you believe your Facebook account has already been compromised by one of these deceiving apps, you should contact Facebook’s support immediately.

No one is safe from cyber-attacks. Not even large corporations with huge cybersecurity budgets.

The truth is, anyone can be a target of a cyber attack, and that’s why it’s important to properly equip yourself to protect your accounts.

By simply following the recommendations provided above, you can minimise the risk of getting scammed by online criminals.

Stay safe out there, folks!

 

[Dberry//]

Why can’t these big companies stop the app that they know has malicious malware delete them from places like apple’s store and other sites that you can download apps from

 

[terri]

I use my phone as a phone. Not too many apps on it as it doesn't have a great deal of memory. So hopefully I'm safe but will be checking anyway.

 

[Ricci]

My phone is a phone, not a fancy games console or something that takes all my attention. I have a laptop for serious computing applications like banking (and the occasional game of solitaire!)

 

[freedy50]

We here at the SDC are always on the lookout for new ways to help our members stay safe, whether it’s through sharing tips and tricks or warning you about possible scams.

That’s why we’re bringing this concerning news to your attention today – over 400 iPhone and Android apps were found to contain hidden malware, which could be used to steal login information to Facebook and other social media platforms.

Upon discovering the threats, tech giants such as Apple and Google, security researchers, policymakers and the team at Facebook have all collaborated to help prevent malicious apps from infiltrating people’s devices.

This is the reason why Meta — the company that owns Facebook, Instagram, and WhatsApp — has issued a warning to its users to beware of any newly-downloaded apps that may come across as ‘fun and functional’.

David Agranovich, Meta threat disruption director, stated that the developers of the malicious apps have been posting fake reviews of their own software online to encourage other users to download their programs.

The apps are disguised as picture editors, games, and VPN services to entice people to download them. Credit: Meta.​

He said that to deceive users into downloading them, these programmes were listed on the Google Play Store and Apple's App Store and disguised as picture editors, games, VPN services, business apps, and other utilities.

Mr Agranovich added: 'Because these apps were accessible in third-party app stores, we're encouraging people to be cautious when downloading a new app that asks for social media credentials.'

'Cybercriminals know how popular these types of apps are and use these themes to trick people and steal their accounts and information.'

The Cybersecurity team also provided a list of questions you should ask yourself before downloading any applications.

• Does it work without your information? Be suspicious of an app that will not let you access its functions without your Facebook information.
• Is the app reputable? Check the download count, ratings, and reviews, and be on the lookout for any negative ones.
• Does it do what it says in the description? Ensure the app provides the function it promises.

Meta also suggested deleting the app if you believe that you have downloaded one of the suspicious programmes.

The company said: 'We recommend that you delete the app from your device immediately and follow the following instructions to secure your accounts.'

It was advised to come up with unique, strong passwords for your accounts, refrain from using the same password on several websites, enable two-factor authentication, and set notifications so that you'll be informed if someone tries to access your account.

'Be sure to review your previous sessions to determine which devices have access to your account,' Agranovich.

'We also encourage people to report malicious applications that compromise Meta accounts to us through our Data Abuse Bounty program.'

A full list of the malicious apps can be found here.

If you believe your Facebook account has already been compromised by one of these deceiving apps, you should contact Facebook’s support immediately.

No one is safe from cyber-attacks. Not even large corporations with huge cybersecurity budgets.

The truth is, anyone can be a target of a cyber attack, and that’s why it’s important to properly equip yourself to protect your accounts.

By simply following the recommendations provided above, you can minimise the risk of getting scammed by online criminals.

Stay safe out there, folks!

I've currently got 372 apps on my phone and they're all 'kosher'. Never been scammed by any of these sort of things. Probably because I know what I'm doing with any techy equipment.