Meta warns 1 million Facebook users their login info may have been compromised

Mark Zuckerberg's Facebook profile displayed on a phone screen and Facebook logo displayed on a screen in the background are seen in this illustration photo taken in Krakow, Poland on April 6, 2022. (Photo by Jakub Porzycki/NurPhoto via Getty Images)·Washington Post· (NurPhoto via Getty Images)
In this article:

Facebook parent Meta is warning 1 million users that their login information may have been compromised through malicious apps.

Meta's researchers found more than 400 malicious Android and Apple iOS apps this year that were designed to steal the personal Facebook login information of its users, the company said Friday in a blog post. Meta spokesperson Gabby Curtis confirmed that Meta is warning 1 million users who may have been affected by the apps.

Subscribe to The Post Most newsletter for the most important and interesting stories from The Washington Post.

Meta said the apps they identified were listed in Apple's app store and Google Play Store as games, photo editors, health and lifestyle services and other types of apps to trick people into downloading them. Often the malicious app would ask users to "login with Facebook" and later steal their username and password, according to the company.

Related video: How 'runaway' algorithms lead us into dark places

"This is a highly adversarial space and while our industry peers work to detect and remove malicious software, some of these apps evade detection and make it onto legitimate app stores," wrote Meta's Threat Disruption Director David Agranovich, and Malware Discovery and Detection Engineer Ryan Victory.

Meta said it reported the apps to Apple and Google and the apps had since been taken down. Google spokesperson Edward Fernandez said in a statement that the "apps identified in the report are no longer available on Google Play." A representative for Apple responded but didn't comment.

Meta has faced scrutiny over its privacy practices for years. In 2019, the Federal Trade Commission approved a roughly $5 billion settlement with Facebook after reports found the political consultancy Cambridge Analytica improperly accessed personal data of millions Facebook users.

Related Content

Norway is portrayed as both hero and villain in Europe's energy crisis

How Ukrainians, targeting by drone, attacked Russian artillery in Kherson

The National Gallery thought this painting was a Vermeer. Now? Not so much

Advertisement