Meta says nearly a million Facebook users’ login information compromised by malicious apps

According to the company, 42.6% of identified malicious apps took the form of photo editors

About a million Facebook users’ accounts may have been compromised after they downloaded malicious apps that stole login information, Meta Platforms said last week.

(For insights on emerging themes at the intersection of technology, business and policy, subscribe to our tech newsletter Today’s Cache.)

According to a company blog post on October 7, Meta identified over 400 malicious Android and iOS apps that tried to steal users’ credentials, mainly by having them log in through Facebook.

“We’ve reported these malicious apps to our peers at Apple and Google and they have been taken down from both app stores prior to this report’s publication,” said Meta in its statement.

Meta provided an extensive list of both Android and iOS apps which included photo editors, voice changers, SEO optimisers, business suite tools, VPN apps, fitness aids, and games.

According to the company, 42.6% of identified malicious apps took the form of photo editors.

Users and security experts have questioned how the malicious apps were listed on regulated platforms like the Google and Apple app stores.