Facebook’s parent company Meta said on Friday that it has detected more than 400 malware apps this year designed to steal users’ Facebook login information.
The apps, which were listed on the Google Play Store and Apple App Store, were disguised to look like fun or useful apps, from photo editors to VPNs to fitness trackers, Meta said in a press release.
Users were typically prompted to login into their Facebook account upon downloading the apps, which would allow the malware to steal their login information.
The people who developed the malware apps also published fake positive reviews in the app stores to cover up any negative reviews that appeared, Meta noted.
All the identified malware apps have since been removed from the Google Play Store and Apple App Store, and Meta said it is alerting people whose information might have been unknowingly compromised.
The company warned users to be wary of apps that require social media credentials and to check an app’s download count, ratings and positive and negative reviews to determine if it’s reputable. They also recommended confirming whether the app actually provides the functions that it promises.
If users are worried that they might have downloaded a malware app, Meta suggested that they reset their passwords, enable two-factor authentication and turn on login alerts.