Protecting People From Malicious Account Compromise Apps

By David Agranovich, Director, Threat Disruption and Ryan Victory, Malware Discovery and Detection Engineer

Today, we’re sharing an update on our work against malicious mobile apps available in the official Apple and Google app stores that are designed to compromise people’s Facebook accounts. We’ve shared our findings with industry peers, security researchers and policymakers to help us improve our collective defenses against this threat. Most importantly, because these apps were accessible in third-party app stores, we’re encouraging people to be cautious when downloading a new app that asks for social media credentials and providing practical steps to help people stay safe.

What We’ve Found

Our security researchers have found more than 400 malicious Android and iOS apps this year that were designed to steal Facebook login information and compromise people’s accounts. These apps were listed on the Google Play Store and Apple’s App Store and disguised as photo editors, games, VPN services, business apps and other utilities to trick people into downloading them. Some examples include:

  • Photo editors, including those that claim to allow you to “turn yourself into a cartoon”
  • VPNs claiming to boost browsing speed or grant access to blocked content or websites
  • Phone utilities such as flashlight apps that claim to brighten your phone’s flashlight 
  • Mobile games falsely promising high-quality 3D graphics
  • Health and lifestyle apps such as horoscopes and fitness trackers
  • Business or ad management apps claiming to provide hidden or unauthorized features not found in official apps by tech platforms.

Pie chart showing categories of malicious apps

This is a highly adversarial space and while our industry peers work to detect and remove malicious software, some of these apps evade detection and make it onto legitimate app stores. We’ve reported these malicious apps to our peers at Apple and Google and they have been taken down from both app stores prior to this report’s publication. We are also alerting people who may have unknowingly self-compromised their accounts by downloading these apps and sharing their credentials, and are helping them to secure their accounts.

How Do These Apps Work?

Malware apps on third-party app stores are disguised to look fun or useful

Malicious developers create malware apps disguised as apps with fun or useful functionality — like cartoon image editors or music players — and publish them on mobile app stores. 

Their developers may publish fake reviews of the app to cover up negative ones

To cover up negative reviews by people who have spotted the defunct or malicious nature of the apps, developers may publish fake reviews to trick others into downloading the malware.

And hope that people will be tricked into downloading it

When a person installs the malicious app, it may ask them to “Login With Facebook” before they are able to use its promised features. If they enter their credentials, the malware steals their username and password. 

The malware can steal user's login information

If the login information is stolen, attackers could potentially gain full access to a person’s account and do things like message their friends or access private information.

Attackers can potentially gain full access to a person's account

How You Can Stay Safe

There are many legitimate apps that offer the features listed above or that may ask you to sign in with Facebook in a safe and secure way. Cybercriminals know how popular these types of apps are and use these themes to trick people and steal their accounts and information. 

Malware apps often have telltale signs that differentiate them from legitimate apps. Here are a few things to consider before logging into a mobile app with your Facebook account:

  1. Requiring social media credentials to use the app: Is the app unusable if you don’t provide your Facebook information? For example, be suspicious of a photo-editing app that needs your Facebook login and password before allowing you to use it.
  2. The app’s reputation: Is the app reputable? Look at its download count, ratings and reviews, including negative ones. 
  3. Promised features: Does the app provide the functionality it says it will, either before or after logging in? 

Here are a few examples of malware apps we found to provide no functionality until you log in with your social media account.

Examples of malicious apps

Example of malicious apps

What to Do If You’re Affected

If you believe you’ve downloaded a malicious app and have logged in with your social media or other online credentials, we recommend that you delete the app from your device immediately and follow the following instructions to secure your accounts: 

  1. Reset and create new strong passwords. Never reuse your password across multiple websites. 
  2. Enable two-factor authentication, preferably using an Authenticator app, to add an extra security layer to your account. 
  3. Turn on log-in alerts so you’ll be notified if someone is trying to access your account. Be sure to review your previous sessions to ensure you recognize which devices have access to your account.

We also encourage people to report malicious applications that compromise Meta accounts to us through our Data Abuse Bounty program.

Threat Indicators

Threat indicators are also available in CSV, TSV, and JSON formats at 

Android Apps

Android Package Name App Name
al.puik.cus CallShowLite Apex Race Game
callerscreen.paper.ringshow CallerPaper Show
com.abs.provideo_editor Video Converter Master Acetoon Photo Cartoon
com.addtextcoon.shapermoter Photo Frame PIP Collage Maker
com.adonarusso.daily.horoscope ZodiHoroscope – Fortune Finder
com.ads_manager_helper Ads Manager Helper Ad Optimization Meta
com.adsagency.socialmng Ad Manager For Social Agent John FPS Game
com.allsite.unlo Unblocked Website
com.amazcam.apbest Best Fun Cam
com.amazing.psychologyfacts Psychology Facts
com.androiddharmesh.editor Cool Photo Editor
com.androiddharmesh.fashioncam Cool Filter Editor Ads & Page
com.anhhuy.adspagesmanager Ads Pages Manager Constellation Master
com.applock.easyuse.lock AppLock-Lock Apps & Privacy Guard Smooth Picture Editor
com.artext.picshow Text Camera
com.artoon.toonphoto Artoon Photo Cartoon Creator
com.artpics.campro Pics Art
com.ashtoon.tooncool.skordoi Ashtoon Cartoon Editor
com.atharva.perfect.photoeffects Perfect Photo Effects | Loop Photo Animator
com.ballmaster.puzzle Bomb Master 3D Free Music Downloader & Free Mp3 Downloader Beauty Camera
com.beautycamera.plusfuny Beauty Camera Plus
com.beautyeditor.bestphotoeditor Photo Editor
com.beautymakeup.cameram Beauty Makeup Camera
com.bestpuz.gams.artpics Art Puzzle 2021
com.biscoco.camfilter Biscuit Coco Cam
com.bluee.gorme Blue-shoot Game
com.blur.image.handle Blur Photo
com.blut.shooting Bluetouch Shooting Game
com.bobom.crashran.race Ranger Crash Game Bamboo VPN
com.borderedit.cameraapp Border Sticker Camera
com.brawsantoon.besteditor Skintoon – Labs of Cartoon
com.businessplannerdesign Business Planner Manage Classic filter camera
com.camepicin.libevent PIP Camera 2022
com.candlesvpn.proxyss Candles VPN
com.caniqiwa.perfectpuzzles Perfect Puzzles
com.cartoons.photofacemaker Photo editor PIP collage maker
com.caryshughes.toonprismaeffect ToonPrisma – 3D Photo Effect
com.charlottefabron.hdvideoplayer HD Video Player with music BeautyCam
com.cliffbradley.youtooncartooneffect YouToon – AI Cartoon Effect
com.colinread.playphooteditor Play Phoot Editor & Collage
com.collageimage.photofilter Photo Filter
com.coolcall.callshow Color Call
com.coolcall.newspipcamera Photo PIP Camera
com.craftstoon.cartoonphoto Craftsart Cartoon Photo Tools
com.creatoonbest.faceedit Creatoon Face Editor
com.creatorlena.vieds Photo Video Editor:Lena Editor Crown Camera
com.customcamare.ppcamera Photo Pro 2021
com.d2p.ads_manager_plus Ads Manager Plus
com.dahuadata.photomakerpip Maker PIP Gallery
com.dashboardmanagemeta Pages Dashboard
com.davykinsman.photoquipo.cartooneffect Photoquipo Cartoon Pic Effect Flyingfish Wallpaper
com.ddhd.cameraadorn CameraAdorn
com.ddhd.creatormould CreatorMould ElegantImage Deep Wallpaper-live,HD
com.dennisarmstrong.videolancervideomaker Videolancer – Pro Video Maker
com.dreammaker.phgridpip PIP Collage Coco
com.dressing.charm.apps Dress up Charming
com.dwyzb23xjiqpsn.zbqyuvfgtion 3 Patti King – India Rummy
com.dypica.facepicture Face Picture
com.dysfree.barcode.scanner QR Barcode Scan
com.edgarmay.atecphotoeffect Atec Sparkle Photo Editor 2022
com.editor.xinphoto Enjoy Photo Editor
com.edmondatrentini.dingdingphotoeffect Ding Ding Photo Effect Editor
com.expto.akgarhwal.puzzlex Art Photo Puzzle
com.fabiomancini.cartoonpainteffect Cartoon Face Photo Editor
com.faceart.savetoon.cartoonedit Savetoon Art – Face Cartoon
com.faceartoon.studioon Facetoon Photo Art Fast VPN Proxy Ads Optimize
com.fb.metas.adsmanager Ads Manager For Business
com.fillartoon.toonphotos Pica Artoon Face Editor
com.filmstrip.drawanima Photo Layout Editor
com.filter.photoeditor Instapic: Photo Editor Pro, Collage Maker
com.fimeruv.shapephotoeditor Shape Photo Editor
com.fiwyl.sharephotomaker Share Photo Maker
com.flnt.uck Speedy Vpn Tunnel
com.floydhampton.moldishmansphotoeffect Moldish – Men’s Photo Editor FlyFish Speed
com.fonts.text.board Stylist Fonts for Keyboard
com.fotspicass.makerpiccoa PIP Editor Frame Photo
com.fqrs.qrscapp Flash QRCode Scanner Transcend VPN Free VPN Master
com.freevpn.proxytuber Super Tuber VPN
com.freevpn.proxytubervpn Tuber VPN – Free&Secure VPN Proxy Server
com.fstl.vtnel Fast Vpn Tunnel
com.fucol.puz Photo Puzzle 2021 Lone Hero Racing
com.fysolasil.sharephotoeditor Share Photo Editor
com.gadybatax.artsphotos Arts Photos Art Filters:Photo to Painting
com.gamebooster.safegame Game Booster
com.gcam.pvint Vinto Cam
com.genten.soulmatch Emotion Checker
com.ghost.vpn.masterproxy Ghost VPN Proxy
com.gpstrian.phototrian Train Photo
com.grigoriipeerevozchiikov.animephoto Anime Photo
com.gtrid.edit.bingoemaker Photo Editor Pic Collage
com.HalogenElement.Frame.TrainPhotoFrame Train Photo Frame
com.hiepro.hiynode Hiyoo Hidenode pro
com.hiranursaygi.allinoneofficereader All in one Doc Editor & Viewer Fun Wallpaper
com.hotspot.vpn.freeproxy Hotspot Free VPN
com.hqapps.ppp.wallpaper Highquality Purple Wallpaper
com.hunbeiren.pipeditorimage PIP Editor Image
com.iceselfie.beautycamx Ice Selfie Beauty Cam
com.image.move.puzzle Image Move Puzzle Business from Instagram
com.interaction.wonderful Wonderful Camera
com.ivorfrazier.orahororscope Ora Horoscope – Fortune Finder
com.jxpsnyy.kbvjdjx.dingdingphotoeffect Ding Ding Photo Editor
com.kali_corporation.skethcamplus Sketch CamPlus Instant Translator
com.kangaroo.vpnproxy Kangaroo VPN Photoont – Photo Collage Edit
com.kotmob.palmistry Palmistry Reading Free
com.kutsalkoyuncu.toonexphotoediotr Toonex Photo Editor 2022 Male fitness
com.leneroth.photocollagegridmaker Pic Collage & Cartoon Editor
com.liannasoft.editorcam 4K Camera Hyper Photo Filters
com.liferun.freegame Life Run
com.lightling.creatortoon.cartoon Lighting Creator Toon
com.lightning.vpn.proxys Lightning VPN
com.likefile.superfile Files Clear
com.lilaihua.photoeditor PhotoEditor
com.lofacartoon.azwajstudio Lofa – Studio Photo Cartoon
com.luckycatcher.freegame Lucky Catcher – Catch Them All
com.lucpro.luckypro Lucky Number Pro
com.lujeqari.videoremaker Video Remaker
com.madtoon.aicartoon.kiroah MadToon Face Cartoon Magic Horoscope
com.marcyl.wagbversion.gblatest.gbproversion.lite GB WA Warna Latest Version
com.masto.kicter Free Comic Photos
com.maxinetate.jessicabailey.fosterphotoeffect Foster – Cartoon Photo Effect NeoSnap Photo Editor
com.meta.adsformeta2 Business Ads for Meta
com.meta.adsformeta3 Business Meta Manager
com.meta.optimizer Meta Optimizer – Ads Analysis Meteor vpn
com.mexsier.nebwallpaper Nebula Wallpaper
com.milohoward.rosalindvega.theobarber.photoframeeffecteditor Photo Editor – Frame Effect
com.mkce.fsvc Full Screen Video Editor
com.mnbeautif.lanchmn Nice Photo
com.moker.sticker Sticker Maker Pro
com.mold.figure.gym Mold Figure Gym
com.mood.camerapluss Mood Camera
com.mosiaguda.astrohoroscope Astro Horoscope Guide 2022 MuMus Music Player
com.newsandpic.cityphoto Photo PIP 2022
com.niceimg.editorsa Camera PIP
com.nuclearpower.vpnp Nuclear VPN Proxy Okenyo Studio Creatoon
com.oknia.panacamera Pana Camera Daily Fitness OL
com.onlansuyanto.editor.bading Onlan Cartoon Editor
com.oransoda.player.soda Soda Music Player
com.palmistry.ofdestiny Palmistry of Destiny
com.papalai.popularemoji Popular Emoji
com.pedomeste.steppedometer Hot Sexy Girls
com.perfectphoto.lookablum Perfect Photo Album
com.peweephotoon.halfcartoon Pewee Photoon – Photo Cartoon
com.phabanner.cameraig Photo PIP
com.phonepad.sniper Critical Strike Ops – FPS 3D shooting Game
com.phonepad.towerdefense Tower Defense Zone – Batmen Rush Simple Photo Adjuster Blur Effect Camera Photo Gaming Puzzle Panorama Camera
com.photoeditor.pipcamera.photoeffects Pip Camera 2022
com.photoeditor.proy Photo editor Pro
com.photoeditor.sweetsummer Sweet Summer Camera App
com.photoeditoreffect.mojung Abrasive Photo Editor
com.photolupo.pipwall Photo Editors
com.photoplaze.rainbow.color Rainbow Photo Plaze
com.photosticker.camerayou Photo Sticker&Camera:make you beauty
com.piccollage.imageeditors Pic collage: photo editor&beauty image
com.piclibra.apiceditor Camera PIP Editor PIP Pic Camera Photo Editor
com.piphoto.pipsapp PIP Photo
com.pipnames.gocamera PIP Editor Collage
com.Pixa.PhotoEditor.PicsArt.CollageMaker.Lightroom.PhotoLab.PixelLab.Pixlr Pixa: Photo Editor & Collage Maker ToonArt
com.playrix.manormatter Treasures of the Pharaoh
com.plugiedit.editandimg PIP Pic Camera Photo Editor
com.postergrid.resdecypic Photo Collage Maker Pic
com.pped.topcam Perfect Photo Editor
com.prettysmart.easyuse.powerlock Smart AppLock
com.privacyapp.applocker.coolock Cool Lock Pulse Music Player
com.pumpkinvpn.proxysafen Pumpkin VPN Punk Vpn Pure-VPN:Fast Stable Secure internet Proxy
com.quality.famous.deep Deep Art Effects
com.realdrive.dreamgame Real Driving
com.rebekkadreyer.facecartooneffect.photoeditor Papatoon Face Art Editor
com.renanespic.addpici Camera Photo Editor
com.retmagic.piplike PIP Magic 2022
com.rextate.photovideomaker Photo Video Creator with Music
com.ring.alarm.tone.flash Pop Ringtone
com.rismas.tdaycam Christmas Sticker Camera App
com.rnapp.fmfm Ads Manager for Meta
com.roc.ketcon Rocket Connect
com.rushcar.hypergame Rush Car 3D
com.rushhour.hyperovertake Rush Hour 3D – Heavy Traffic
com.rynama.videoeditor Video Editor Safe Link
com.saprontsevgertrud.cartoonillustrator Cartoon Illustrator
com.satan.gifpipo PIPO GIF
com.secsurf.fastvpn Surf Vpn
com.seelad.mucxx.apo Sealand Music Player
com.sensitivity.swarmphoto Swarm Photo
com.servotronicstech.perfectprocam Perfect ProCam
com.sheilacoleman.fissioneffectdoeditor Fission Effectdo Pic Editor
com.shinestar.camerax ShineStar Camera
com.shirleypope.lightexposureedit Light Exposure Photo Editor
com.sketchmaster.camplus Cartoon Cam Pro
com.slftz.xlzg High HD Wallpapers 4K
com.slidingpuzzle.slidepuzzle Amazing Photo Puzzle Smart SMS Messages
com.snapcamera.beautyys Snap Beauty Camera
com.snapeditor.proproxy Snap Editor Pro Snap Face Camera Sandwich SnapBeauty Cam
com.sofapro.editortoon Sofa Cartoon – Pro Editor
com.solupho.imdetail PIP 2022
com.spedgame.dsrg Drift Speed Racing Game
com.speed.booster.phonefree Speed Booster
com.splicteout.photocolleger SplitScreen PIP
com.sqlengphoto.photoeditorpicmix PicMix Photo Editor Star Line
com.stillcut.spiraeffect PIP PHOTO Pvideo Superior Speed
com.surfvpn.proxyfast SurfVPN – Fast VPN Proxy S-VPN Proxy
com.svpnproxy.safeclient S VPN – Fast & Safe VPN Client
com.sweet.lightlycamera Lightly Camera
com.sweetcamera.filterface Sweet Beauty Plus Camera Beauty Sweet Camera
com.tbn.fasts Speedy Turbo
com.techno.photoposterframe Fantastic camera
com.tentwheel.flyingphoto Flying Photo
com.theme.cartoon.board.key Cartoon Keyboard Theme
com.threetranslator.wonderas Translation Assistant Torrent Torch VPN Proxy
com.touchvpn.proxymaster Touch VPN Master
com.traffictour.freegame Traffic Tour 3D
com.trixgardner.photazophotoeffect Photazo – PIP & Cartoon Effect
com.truing.motopoolparty MotoM3X-PoolParty
com.tuber.vpnproxy.internet Tuber VPN Proxy Tubo VPN Master Secure Turbo
com.ubo.tnspeed Turbo Net Unlimited Net VPN Lite – Fast & Easy use VPN
com.vendertext.onphoto Vender Add Text on Photo Video Editor 2021
com.virgovpn.proxyy Virgo VPN Viva VPN Booster
com.vivid.coltor Vivid Cooleditor
com.voicechanger.soundseffect Voice Changer
com.vpn.proxy.unlimited Private VPN HD 4K Wallpaper
com.wanstep.likekeepstep Keep Step
com.waxwell.saunders.pistaphotoeditor Pista – Cartoon Photo Effect
com.waynecraig.magicalastrology Magical Daily Astrology Reader
com.whddhd.brilliantphoto Brilliant Photo
com.whddhd.fancyphoto FancyPhoto
com.whddhd.pixeditor PixEditor
com.willowpena.fiestraphotoeditor Piestra – Comic & Blend Effect
com.wilmaarnold.kutsalsaglik Smart PDF Reader and Editor Female Fitness Workout Pro
com.wwxd.toolkit Toolkit
com.xcar.highwayrace.ds Xcar Highway Race
com.xevaphoto.cartoonion Xeva Photo Cartoon
com.xingx.gifimage GIFs-Search Animated GIF & Stickers
com.xinx.apls 2021 MagicCamPlus
com.xinxin.anjoyartphoto Enjoy Art Photo
com.xonasounds.relaxing Xona Relaxing Sounds
com.xooil.elzup MAGIC PHOTO PUZZLE
com.young.photoeditor.cartooneditorapp Cartoon Effects Photo Editor
com.yunlinan.photoeditorwall Photo Editor Wall
com.yvpnproxy.freemaster Y VPN Master ZooMate VPN Proxy Vilatouch crash game Vilatouch crash car Online Shooter FPS Free Music Downloader & Music Player
ftp.bomcarcing.crashcars Crash Racing Game
ftp.camfilter.lovebeauty Beauty Camera Filter
ftp.firattck.fpsgame Action Flame FPS
ftp.piaoyi.racegames Drift Sprint Racing Game
ftp.raceranger.gamepp CityRanger Racing Game Thefun Camera Desert Hunting Game
game.trytospin.nipsotyrtll Try to spin
lunarzodiacg.besthoro Lunar Zodiac Horoscope Callshow Flash
media.grape.sdhnt.player Grape Media Player Tean Music Player Male Fitness 2020 2022 Ultra Camera
net.fpsol.shooters Code Name-Vulture FPS OL
net.kanvpn.fastspeed Kangaroo Fast VPN
net.musicesapp.player Muses Music Player Red Camera
net.snaphdphotoeditorapp.ishscsnaphdphotoeditor Snap: HD Photo Editor
net.ssonn.boomrace Lightning Drift Racing
net.sweetplus.camx One-Sweet Camera Baby Camera
niko.ldali.batter BatterySafe
org.crashmaster.funrace.aps Crash Race Master Donfan Music Player
org.mumu.hdpalyer.apps Mulu Music Player
org.musinvshen.player Musae Music Player
org.nzombie.hutgame Night Hunter Game Teana Music Player
org.svpn.goatsheep Goat Safe VPN
org.zipaimei.camfilter SnapBeauty Cam Filter
player.mmm.mediapp.otrs Mostfun Media Music
player.pinol.enoyend OseaCamera Pomelo Music Player Sealod Music Player SeaShell Music Player ProFlash Kite camera Apex Crash Race
solo.impostormaster.kill Impostor Master Solo Kill 2021 Instant Drag Speed Racing Extreme Speed Race
whsmy.blod.sper NoneCanDie City Crash Racing Game Callpaper Show
win.hapsunday.mplayer Sunday Media Player
win.hoomhom.fpsgame Flame Shock FPS
win.modoen.time.camer Modern Time Camera Rainbow Square- Sort Puzzle
win.tebag.camap Tea Bag Camera

iOS Apps 

iOS App ID App Name
1555651942 FB Advertising Optimization
1561642325 Business ADS Manager
1563142182 Ads Analytics
1564091908 FB Adverts Optimization
1566705026 FB Analytic
1566706023 FB Adverts Community
1574530186 Adverts Ai Optimize
1587056055 Very Business Manager
1591775710 FB Business Support
1593368297 Fb Ads
1596775769 Meta Optimizer
1597553589 Business Manager Pages
1598946098 Adverts Manager
1600072709 Meta Adverts Manager
1600404846 Ad Optimization Meta
1601275530 FB Pages Manager
1602637866 Business Ads
1603255418 Meta Business
1603571287 Business Suite Manager
1604086670 FB Ads Cost
1607057895 Adverts Bussiness Suite
1608743187 Business Ads Clock
1609915932 Ads & Pages
1610859814 Business Suite
1610944161 Business & Ads
1612196202 Business Manager Overview
1613983385 Business Suite Ads
1619733733 Page Suite Manager
1622402517 Business Meta Support
1623362126 Pages Manager Suite
1625368035 Business Meta Pages
1626632781 Business Suite Ads
1626692617 Ads Business Knowledge
1629919774 Page Suite Managers
1631778308 Pages Managers Suite
1632069527 Ads Business Advance
1632606219 Pages Manager Suite
1633012933 Business Suite Optimize
1633016482 Business Manager Suite
1633078757 Business Suite Managers
1633828994 Ads Business Manager
1635045234 Ads Business Suite
1635301567 Business Manager Pages
1635555183 Business Adverts Manager
1636196931 Ads Manager Suite
1636825108 Business Manager Pages
1639572841 Ads & Business Suite

To help personalize content, tailor and measure ads, and provide a safer experience, we use cookies. By clicking or navigating the site, you agree to allow our collection of information on and off Facebook through cookies. Learn more, including about available controls: Cookie Policy