Meta is warning Facebook users that dozens of “malicious mobile apps” have infiltrated users’ iPhones via the App Store. Security researchers have found hundreds of apps that are “designed to steal Facebook login information and compromise people’s accounts” and could have compromised more than a million logins.
See also: Make-A-Video: Meta's new AI technology that creates videos

While the company has uncovered more than 400 apps in total, only 50 came from the iOS App Store , and all have been removed. Meta says the apps, which were listed on the Google Play Store and Apple’s App Store as legitimate apps, were “disguised as photo editors , games, VPN services , business apps , and other utilities to trick people into downloading them.”
See also: Meta: Suspends all hiring and warns of possible layoffs
The majority of the apps were photo editing programs, specifically “those that claim to let you turn yourself into a cartoon,” followed by games, flashlight brightening apps, and VPNs. When installed on an iPhone, the apps ask users to log in to Facebook in order to use it. Once they do, the hidden malware will steal their username and password and could use to gain full access to account .
Meta says users who have downloaded the apps should delete them from their phones and change their Facebook passwords. The company also recommends enabling authentication and turning on login notifications so you can be notified if someone tries to access your account. The company estimates that more than a million users may have fallen victim to the fake apps.
These are the apps that Meta has identified as malicious:
| iOS App ID | Application name |
| 1555651942 | FB Advertising Optimization |
| 1561642325 | Business ADS Manager |
| 1563142182 | Ad Analytics |
| 1564091908 | FB Ads Optimization |
| 1566705026 | FB Analytics |
| 1566706023 | FB Ads Community |
| 1574530186 | Advertisements Ai Optimize |
| 1587056055 | Very Business Manager |
| 1591775710 | FB Business Support |
| 1593368297 | Facebook Ads |
| 1596775769 | Meta Optimizer |
| 1597553589 | Business Manager Pages |
| 1598946098 | Advertisement Manager |
| 1600072709 | Meta Ads Manager |
| 1600404846 | Ad Optimization Meta |
| 1601275530 | FB Page Manager |
| 1602637866 | Business Ads |
| 1603255418 | Meta Business |
| 1603571287 | Business Suite Manager |
| 1604086670 | FB Ads Cost |
| 1607057895 | Adverts Business Suite |
| 1608743187 | Business Ads Clock |
| 1609915932 | Ads & Pages |
| 1610859814 | Business Suite |
| 1610944161 | Business & Ads |
| 1612196202 | Business Manager Overview |
| 1613983385 | Business Suite Ads |
| 1619733733 | Page Suite Manager |
| 1622402517 | Business Meta Support |
| 1623362126 | Pages Manager Suite |
| 1625368035 | Business Meta Pages |
| 1626632781 | Business Suite Ads |
| 1626692617 | Ads Business Knowledge |
| 1629919774 | Page Suite Managers |
| 1631778308 | Pages Manager Suite |
See also: Meta: App developers sued for stealing over 1 million WhatsApp accounts
Affected users may receive an email from Facebook notifying them of a potentially compromised account, but anyone who may have downloaded one of the above apps should change their password immediately.
Information source: macworld.com
