Malware disguises itself as an Android app named “any_name.apk” and is sent to Android phones via Facebook’s mobile app. Malware is similar to clickjacking, which takes place very often on Facebook. Google recently introduced a malware-blocking system called Bouncer to keep the Android Market safe from malicious software, but spammers and fraudsters are still managing to find ways around the restrictions to get their software onto users’ phones. Some Android users choose to turn off this protection in order to have access to apps distributed outside of Android Market.
Source: https://thehackernews.com/2012/02/facebook-app-spreading-android-malwares.html