Security researchers have stumbled upon an app that Google has removed from the Google Play Store after it was downloaded over 100,000 times. What makes this app so deadly is its ability to collect personal data from smartphone users’ Facebook accounts. French mobile security firm Pradeo
) says that this app uses malware called “Facestealer,”
“Facestealer” is a so-called Android trojan that earns that name because it tricks Facebook users into typing all of their credentials onto a web page. This personal information is then sent to a server registered in Russia that belongs to the attacker. When an Android user adds his Facebook credentials to the website, the developers of the now removed app have access to the Facebook subscriber’s credit card data, search information, and more.
The trojan was embedded inside an app on the Google Play Store that was named Craftsart Cartoon Photo Tools and was supposed to help edit photographs. Pradeo says that the app contained some code that allowed it to slip past Google’s Play Store defenses and was used for more than seven years while connected to other malicious apps in the Android app storefront.
If you installed Craftsart Cartoon Photo Tools on your Android phone, delete it now
When the app is opened by unsuspecting users, a Facebook login page appears requesting that the user sign in with his/her Facebook username and password. According to Pradeo, “Facebook credentials are used by cybercriminals to compromise accounts in multiple ways, the most common being to commit financial fraud, send phishing links and spread fake news.”
Comments from Craftsart Cartoon Photo Tools users should have tipped you off
If you’re a loyal PhoneArena reader, you know that the first thing we suggest that someone look at before installing an app from an unknown developer is the comments and reviews section of the listing. Comments about seeing too many ads or other issues combined with low review scores usually indicate the presence of malware.
Take a look at the comments and reviews left by users of the Craftsart Cartoon Photo Tools app. All of the reviews accompanying this article gave the app just one-star and called the app “Totally Fake,” “useless,” and “totally untrustworthy.” When you see reviews and comments like that, move on to another listing pronto.
Keep in mind that just because Google removed the app from the Play Store it doesn’t mean that the app is safe to stay installed on your Android phone. If you did install Craftsart Cartoon Photo Tools, you need to uninstall it immediately to protect your credit card and other financial data.