www.techradar.com/news/these-popular-android-apps-were-stealing-facebook-passwords
Cybersecurity analysts have discovered ten different Android apps that surreptitiously pilfered user credentials, nine of which had managed to collectively clock over 5.8 million downloads on Google’s Play Store.
Malware analysts at security firm Doctor Web said that the apps masqueraded behind genuine use cases such as photo editing and framing, exercise and training, horoscopes, and removal of junk files from Android devices, and were fully functional.
The apps invited users to remove ads and access all their functions, simply by logging into their Facebook accounts, which is how they got hold of the login credentials.