{"id":90617,"date":"2022-03-14T14:49:19","date_gmt":"2022-03-14T09:19:19","guid":{"rendered":"https:\/\/blogs.quickheal.com\/?p=90617"},"modified":"2023-02-15T15:08:28","modified_gmt":"2023-02-15T09:38:28","slug":"stay-alert-of-facebook-credential-stealer-applications-stealing-users-credentials","status":"publish","type":"post","link":"https:\/\/www.quickheal.com\/blogs\/stay-alert-of-facebook-credential-stealer-applications-stealing-users-credentials\/","title":{"rendered":"Stay Alert of Facebook Credential Stealer Applications Stealing User’s Credentials."},"content":{"rendered":"

Social media credentials are always a lucrative thing for threat actors. They use various techniques to get them. Some use overlays with fake user interfaces, some use key-logging, and some use simple social engineering to trap users. Another way threat actors have been used in the recent past is JavaScript code injection in WebView to steal Facebook credentials. The script directly hacked<\/a> the entered Facebook login credentials.<\/p>\n

In Jan 2022, Quick Heal Security Labs saw many Facebook credentials stealer applications on Google Play Store, which use different techniques to hide their JavaScript code. Android researchers named Facebook credential<\/a> stealer “Facestealer.<\/strong>”<\/p>\n

How dangerous is this?<\/strong><\/h2>\n

In case of successful harvesting of Facebook credentials, the hacker gets access to the user’s personal information like personals details, friend lists, relation details, activities, private posts & messages, Photo\/Videos, life events, etc. and perform malicious activities such as hackers can<\/p>\n