A new Android malware strain can phish Facebook user credentials and then log into accounts to harvest account details. Symantec researchers say most victims are from the Asia-Pacific region. The malware is distributed in malicious apps made available to English-speaking users on third-party app stores. Researchers say the malware is different from all previous Android info-stealing trojans. It can even search and collect results using the Facebook app’s search function, they say. Researchers: “The functionality that crawls the Facebook page has a surprising level of sophistication”””
Source: https://www.bleepingcomputer.com/news/security/fakeapp-android-malware-steals-facebook-credentials-logs-into-accounts/