Malicious game apps that could steal your face(plus a lil reminder to you guys)

Nowadays, games can sometimes go hand-in-hand with Facebook. Some games are already on Facebook and some can have their players log in using their Facebook account.

Google Play has tons of games and apps to offer, although you just have to be really careful and read all the permissions an app requests to you. Even if a game or app has a lot of downloads and installs, users really should check the apps' reviews and check how other users find them to be.

Popular games, for example 'Cowboy Adventure' and 'Jump Chess' had been running for about 4 months with up to 500,000 - 1,000,000 downloads.

 

image from http://virusradar.com/en/Android_Spy.Feabme.A/description

You might say, "Wow! that must be a really a fun game to play. I want to download that too". Now, hold up! Let's check what people are saying about it.

user reviews about Cowboy Adventure

Both Cowboy Adventure and Jump Chess are actually malware. These apps contain Android_Spy.Feabme.A.


How do they work?
Well, unlike other malwares, theses apps are actually functionable and playable. When users launch these apps on their mobile devices, a fake Facebook log in will be displayed on screen. If a user enters their Facebook credentials, it will be sent to the malware dev's remote server. The malware can then take control of the user's Facebook posts and spams their friends with advertisements of the apps so that it could generate more downloaders.








Article Refs: http://www.welivesecurity.com/2015/07/09/apps-google-play-steal-facebook-credentials/, http://blog.trustlook.com/2015/07/08/most-successful-malware-on-google-play/ and http://virusradar.com/en/Android_Spy.Feabme.A/description