Meta Stock Jumps as AI Cloud Expansion Challenges AWS, Microsoft, and Google 
Anthropic Brings Claude AI Models to Microsoft Azure Foundry With NVIDIA Blackwell GPUs 
Meta CEO Zuckerberg Says AI Agent Development Has Slowed Despite Massive AI Investment 
Smartphones are helping filmmakers tell the stories the movie industry overlooks 
Super Micro Shares Slide After Taiwan Raids Over Alleged Nvidia AI Chip Smuggling Probe 
Switch Seeks $2 Billion Funding at Nearly $50 Billion Valuation Ahead of Potential IPO 
The government is ‘doubling down’ on its social media ban. But bigger penalties for platforms aren’t enough 
SoftBank Shares Slide as OpenAI IPO Delay Concerns Weigh on AI Investment Outlook 
Kuaishou Stock Jumps as Kling AI Secures $2 Billion Funding Round 
EU Chip Industry Faces Growing Risks From China Export Controls and U.S. Technology Dependence: Report 
Kioxia Bets on AI Memory Boom With Next-Gen NAND Production in Japan 
Trump Administration to Launch Voluntary AI Standards for Frontier Models 
OpenAI Proposes 5% U.S. Government Stake Amid AI Policy Talks 
AI can be a personal trainer in your pocket – but is it safe? 
TSMC CoWoS Capacity Forecast Raised as Mizuho Sees AI Server CPU Demand Surging Through 2027 
Baidu Shares Rally as Kunlunxin Eyes $50 Billion Hong Kong IPO 
Apple Challenges India Antitrust Probe, Says CCI Copied Rivals’ Claims in App Store Case 
Google has removed nine Android apps that were reportedly injected with a trojan that could have stolen Facebook passwords. However, the apps have been downloaded by millions before they were taken down from Google Play.
Anti-virus developer Doctor Web reported last week that it discovered 10 trojan apps – nine of which were available on the Play Store – with mechanisms to steal Facebook passwords from their users. Names of the nine Android apps include Processing Photo, App Lock Keep, Rubbish Cleaner, Horoscope Daily, Horoscope Pi, App Lock Manager, Lockit Master, Inwell Fitness, and PIP Photo. At the time of the Android trojan apps’ discovery, they reportedly had more than 5.8 million downloads, with Processing Photo having the most installs at more than 500,000.
Doctor Web found five versions of malware injected in the trojan Android apps. Three of them – Android.PWS.Facebook.13, Android.PWS.Facebook.14, and Android.PWS.Facebook.15 – were from native Android apps. Android.PWS.Facebook.17 and Android.PWS.Facebook.18 were reportedly using the Flutter framework for developing apps with cross-platform compatibility.
The same report noted that these apps were fully functional, thus, making them less suspicious. The cybersecurity firm added that some of the trojan-injected Android apps encouraged its users to log in with their Facebook accounts in exchange for ad-free services or to unlock more features. With many apps, both on Android and iOS, already ask or require Facebook logins, such a request may not immediately seem shady.
A standard Facebook login page was reportedly displayed where users would be able to enter their credentials, including their passwords. The Facebook web page was reportedly loaded into WebView, then a JavaScript from a command and control (C&C) server is loaded into the same WebView. “This script was directly used to highjack the entered login credentials,” Doctor Web explained. The login credentials were then sent to the C&C server. The trojan Android apps also reportedly acquired cookies from existing authorization that were sent to the attackers as well.
The apps are no longer available on the Play Store as of this writing, but some of them are still downloadable from third-party websites where Android users can sideload them. Google confirmed to ArsTechnica that the developers of the nine apps have been banned from the platform.
Photo by mohamed_hassan from Pixabay
