More than 300,000 Android users have been hit, and the Schoolyard Bully Trojan is stealing the user's Facebook account.
CTOnews.com, December 2 news, cyber security company Zimperium recently released a security report, said that recently in Google Play Store Mall found a number of malicious applications with Trojan "Schoolyard Bully", mainly disguised as reading, education applications to steal users' Facebook account credentials.
CTOnews.com learned that apps containing the Trojan are often disguised as reading and educational apps, and users can steal the following information after downloading and installing it:
The name of the Facebook account
Facebook ID
Facebook email / Mobile number
Facebook password
Device name
Device API
Device memory
The Trojan steals this data by opening a legitimate Facebook login page within the application and injecting malicious JavaScript code to obtain user input. The malware can even evade antivirus programs and machine learning virus detection.
The report points out that at least 300000 users in 71 countries and regions around the world are affected, and the actual number of users may be more affected. Zimperium pointed out that these malicious applications still exist in some third-party app malls.
