Google Removes Several Popular Android Apps Stealing User Passwords
The apps — bearing user-friendly titles such as Horoscope Daily and Rubbish Cleaner — would load up a legitimate Facebook login page and then pass your credentials along to its own app and server, along with your cookies.
Most staggeringly, the nine apps racked up more than 5.8 million downloads combined.
Google has since removed all the malicious apps and banned its developers from the store, although it is possible for them to create new developer accounts again.
The tech giant currently screens for malware via an automated system, but the incident suggests that it might not be tight enough to prevent more subtle scams.