Thursday, May 26, 2022
  • Hype
  • Murai
  • Lipstiq
  • Diva
  • Varnam
  • Moviedash
  • Autofreaks
Lowyat.NET
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Hardware
      • Compu-zone
      • Viewnet
      • Thundermatch
      • Sri Computers
    • Notebooks
      • Compu-zone
    • Smartphones
      • Thundermatch
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables
No Result
View All Result
Lowyat.NET
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Hardware
      • Compu-zone
      • Viewnet
      • Thundermatch
      • Sri Computers
    • Notebooks
      • Compu-zone
    • Smartphones
      • Thundermatch
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables
No Result
View All Result
Lowyat.NET
No Result
View All Result
Home Mobile Apps

Google Removes Play Store Apps That Stole Users’ Facebook Passwords

Nine apps were removed for major privacy violations.

by Ikmal Rozlan
July 5, 2021
Google Removes Play Store Apps That Stole Users’ Facebook Passwords
155
SHARES
3.1k
VIEWS
Share on FacebookShare on Twitter

Google is racing to identify apps that break Android’s user privacy policies. Ars Technica discovered that Google removed nine trojans posing as apps that stole Facebook login credentials from the Play Store. The malware had over 5.8 million combined downloads and used generic popular titles such as “Horoscope Daily” and “Rubbish Cleaner” on Google Play.

The apps tricked users by loading the Facebook sign-in page and redirecting it to a command and control server, which loaded JavaScript that then “hijacked” usernames and passwords and passed them to the app, thus the command server. To complete their goal, they would also swipe some cookies from the authorisation session.

While Facebook was the only target, in each case, the perpetrators could have easily redirected users toward alternative internet services. It was discovered that while there were five malware variants, they all used the same JavaScript code and configuration file formats to steal the information.

In response to an inquiry from Ars, Google stated that it had banned the offending developers from the store, though this may not pose much of a barrier for the perpetrators, as they can easily set up new developer accounts. To that end, it is possible that Google will have to screen for the malware itself in order to keep the scammers out.

ADVERTISEMENT

Of course, the bigger question is how the apps ended up with so many downloads before they were removed. Thanks to the artificial intelligence and machine learning that Google has employed, the majority of malware online do not slip into the Play Store, but the finer points of the technique may have allowed certain rogue apps to bypass these parameters and allow their victims to remain unaware that their Facebook data had been compromised.

Google Play Store

The damage this time isn’t so bad compared to when Google discovered that Camscanner, a popular app that had been downloaded over 100 million times, was riddled with malware. On another note, Google Play’s AI detected one million apps that violated the platform’s policies last year. Regardless of the underlying cause, it bears repeating that it’s important to be cautious about downloading apps from unknown developers, no matter how popular they appear to be.

(Sources: Engadget, Slash Gear // Image: portal gda / Flickr)

Tags: GooglePlay Store
Updated 5:22 pm, Mon, 5 July 21
Back to top
Share62Tweet39SendShare

ADVERTISEMENT

RELATED ARTICLES

s pay global service sarawak
News

Sarawak Plans To Combine Water, Electricity Bills

by Ikmal Rozlan
May 25, 2022

The Sarawak state government has revealed plans to introduce a single utility bill for Sarawakians through digitalisation. The proposed system...

Read more
ASUS Announces ROG Crosshair X670E Extreme Motherboard
Hardware

ASUS Announces ROG Crosshair X670E Extreme Motherboard

by John Law
May 25, 2022

ASUS pulled back the veil on its latest AMD motherboard, the ROG Crosshair X670E Extreme. The new motherboard was announced...

Read more
traffic lights jam congestion
News

DBKL To Study Synchronised Traffic Lights To Reduce Congestion

by Ikmal Rozlan
May 25, 2022

Kuala Lumpur City Hall (DBKL) has announced a new study to find measures to reduce the traffic congestion in KL...

Read more
CaltexGO Cashless Payment App Is Finally Official In Malaysia
Apps

CaltexGO Mobile App Now Usable Nationwide

by John Law
May 24, 2022

Chevron Malaysia Limited's (Chevron) own app, CaltexGO, can now be used at all Caltex stations across Malaysia. The announcement marks...

Read more
Load More
No Result
View All Result

TRENDING TODAY

  1. 1
    Transportation

    Proposals For New Klang Valley Highways Approved To Reduce Congestion

  2. 2
    Photography

    Huawei and Leica Partnership Is Officially Over

  3. 3
    Mobile

    Samsung Galaxy A73 5G Review: Pushing The Price Barrier

  4. 4
    Apps

    Google Removes Play Store Apps That Stole Users’ Facebook Passwords

  5. 5
    Events

    Anyone Can Be A Filmmaker By Joining Samsung’s Short Film Competition!

Lowyat.NET

Consumer Tech News & Reviews Malaysia

NETWORK

  • Hype
  • Murai
  • Lipstiq
  • Diva
  • Varnam
  • Moviedash
  • Autofreaks

ABOUT

  • Advertise
  • Careers
  • Privacy Statement
  • Contact Us
  • Editorial Policy
  • Terms & Conditions

©2022 LOWYAT MEDIA, LLC. ALL RIGHTS RESERVED.

No Result
View All Result
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Hardware
      • Compu-zone
      • Viewnet
      • Thundermatch
      • Sri Computers
    • Notebooks
      • Compu-zone
    • Smartphones
      • Thundermatch
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables

©2022 LOWYAT MEDIA, LLC. ALL RIGHTS RESERVED.

We use cookies to improve your experience. Learn More.