XDA Developers

malicious apps

Readers like you help support XDA Developers. When you make a purchase using links on our site, we may earn an affiliate commission. Read More.

latest

Google Play
Google has removed 25 apps from Play Store for phishing Facebook credentials

Google has removed 25 malicious apps disguise as wallpaper, flagshlight, or weather apps for fraudulently stealing Facebook credential of users.

3
By 

Android powers more than five times as many smartphones and tablets as iOS. As a result, the number of apps on the Google Play Store is considerably higher than Apple's App Store and that makes the app review process less rigorous for Android. Predictably, that allows many malicious apps to pass through the review process much more easily and remain on the Play Store until reported for chicanery. Google, however, does act promptly in removing malicious apps, especially when it comes to serious allegations like phishing. The internet giant has now struck down 25 apps for deceiving users and logging Facebook login credentials, as per a recent report.

Bugdroid Android Robot Feature Image XDA Orange

What we at XDA once envisioned as a proof of concept security vulnerability has now been confirmed by computer scientists at the Georgia Institute of Technology in Atlanta. The team details what they call "cloak and dagger" exploits which can take over the UI of most versions of Android (including 7.1.2). Given it's nature, it is difficult to fix and also difficult to detect.