While they were supposed to be games, malicious Android apps aimed to steal the credentials of users of the popular social network.
After analysis by ESET Mobile Security, two malicious games were detected as Android/Spy.Feabme.A. on Google Play. While appearing as game apps with the names Cowboy Adventure and Jump Chess , they hide a feature that allows phishing attacks .
Unlike other recent cases of fake apps, Cowboy Adventure and Jump Chess are indeed real games but contain malicious elements. After installing them on Android devices, a fake Facebook would ask for the user's login credentials to their account and send the information directly to the attacker!
The number of potential victims may have reached 1 million, however many appear to have managed to avoid the scam due to negative comments from other users that deterred others from filling out their details in the fake window, according to Robert Lipovsky of ESET.
