Malicious Apps

A recent incident at Meta's Facebook left users worried as the social media giant announced earlier this week that over a million users may have had their credentials compromised. The reason behind the security lapse - malicious apps that tricked users into giving the app their login credentials under false guises. A report by Bloomberg suggests that a number of malicious apps that were available on the Play Store and App Store were disguised as photo editors, mobile games and health trackers, among others. This makes it hard for most people to identify what could potentially be problematic apps, since such apps are built around offering a false use-case. Malicious apps will offer to provide extra bonus features by getting users to log in to their Facebook account (or another social media account). This seemingly harmless act tricks users into opening in-app windows where they will sign in with their usernames and passwords. Similar to how keyloggers work.