Scam Apps Stole Facebook Login Credentials – Here’s a List of the Bad Actor Authored Apps

Facebook parent company Meta has issued a security warning to approximately 1 million Facebook users that their login credentials may have been stolen by scam apps. While the majority of the apps were Android apps, 47 of them were distributed in Apple’s iOS App Store.

The apps used “Login with Facebook” to steal the logins. Many apps and websites offer third-party login options, commonly using third-party login options include:

• Login with Facebook
• Login with Google
• Login with Apple

These login methods are designed to make it quicker and easier for users to log in to an app, eliminating the need to register an account. However, this also opens the door to bad actors using the feature to steal your login credentials.

Engadget reports:

Meta is warning 1 million Facebook users that their account information may have been compromised by third-party apps from Apple or Google’s stores. In a new report, the company’s security researchers say that in the last year they’ve identified more than 400 scammy apps designed to hijack users’ Facebook account credentials.

According to the company, the apps are disguised as “fun or useful” services, like photo editors, camera apps, VPN services, horoscope apps, and fitness tracking tools. The apps often require users to “Log In with Facebook” before they can access the promised features. But these login features are merely a means of stealing Facebook users’ account info. And Meta’s Director of Threat Disruption, David Agranovich, noted that many of the apps Meta identified were barely functional.

Facebook users that have used one of the scam apps will see the following message in the Facebook app:

A security notice from Meta

You may have logged into Facebook from a malicious app designed to steal your
Facebook account information.

To protect your information we recommend you secure your account immediately.

The site says that the iOS apps identified mostly targeted business users, with names like Meta Business, FB Analytic, and so on.

If you have installed any of the apps in the list below (shared by 9to5Mac), you should remove the app and then change your Facebook password.

Share Tweet

Flip It

Reddit Pocket