“Facestealer” is a so-called Android trojan that earns that name because it tricks Facebook users into typing all of their credentials onto a web page. This personal information is then sent to a server registered in Russia that belongs to the attacker. When an Android user adds his Facebook credentials to the website, the developers of the now removed app have access to the Facebook subscriber’s credit card data, search information, and more. The trojan was embedded inside an app on the Google Play Store that was named Craftsart Cartoon Photo Tools and was supposed to help edit photographs. Pradeo says that the app contained some code that allowed it to slip past Google’s Play Store defenses and was used for more than seven years while connected to other malicious apps in the Android app storefront.
After being downloaded over 100,000 times, Google withdrew an app from the Google Play Store, according to security researchers. The capacity of this programme to capture personal data from smartphone users’ Facebook accounts is what makes it so dangerous. According to Pradeo, a French mobile security firm (via ZDNet), this app uses malware known as “Facestealer.”
Comments from Craftsart Cartoon Photo Tools users should have tipped you off – Over 100,000 Android users installed this password stealing app from the Play Store; delete it now! If you’re a loyal PhoneArena reader, you know that the first thing we suggest that someone look at before installing an app from an unknown developer is the comments and reviews section of the listing. Comments about seeing too many ads or other issues combined with low review scores usually indicate the presence of malware.
If you installed Craftsart Cartoon Photo Tools on your Android phone, delete it now – Over 100,000 When the app is opened by unsuspecting users, a Facebook login page appears requesting that the user sign in with his/her Facebook username and password. According to Pradeo, “Facebook credentials are used by cybercriminals to compromise accounts in multiple ways, the most common being to commit financial fraud, send phishing links and spread fake news.”
Take a look at the comments and reviews left by users of the Craftsart Cartoon Photo Tools app. All of the reviews accompanying this article gave the app just one-star and called the app “Totally Fake,” “useless,” and “totally untrustworthy.” When you see reviews and comments like that, move on to another listing pronto. Keep in mind that just because Google removed the app from the Play Store it doesn’t mean that the app is safe to stay installed on your Android phone. If you did install Craftsart Cartoon Photo Tools, you need to uninstall it immediately to protect your credit card and other financial data.