The Goalcontrol FacebookThis year, it identified more than 400 malicious Android and iOS apps aimed at stealing users’ Facebook login information.
According to Bloomberg, more than 1 million users will be notified.
“We have informed Apple and Google of our findings and are helping potentially affected people learn more about how to keep them safe and protect their accounts,” Meta said in a statement released Friday.
The apps were listed on the Google Play Store and Apple App Store, disguised as photo editors, games, VPN services, business apps, and other utilities to trick people into downloading them. Some examples include:
- Photo editors, including those that claim to allow you to “turn into a cartoon”
- VPNs that claim to speed up browsing or give access to blocked content or sites
- Phone utilities like flashlight apps that claim to light up your phone’s flashlight
- Mobile games are fake with high quality 3D graphics
- Health and lifestyle apps like horoscopes and fitness trackers
- Commercial apps or ad management apps that claim to provide hidden or unauthorized features that are not found in the official apps by technology platforms.
In the event that your data is stolen, follow these security measures:
- change and create a strong password with letters (uppercase and lowercase), numbers and special characters;
- Don’t just use one password across different apps;
- use Password managerto store all of your credentials;
- Enable File Two-factor documentation (2FA).

Edward Langley is a contributor at Mediarunsearch.co.uk, covering a wide range of topics including news, politics, business, technology, sport, entertainment and lifestyle. He focuses on delivering clear, balanced reporting and useful information that helps readers stay informed about current affairs and developing stories. His work highlights issues, trends and events that matter to everyday audiences, with an emphasis on accuracy, relevance and accessible journalism.
