Delete these 25 Android apps and change your Facebook password NOW – you may have been hacked

DOZENS of Android apps have been caught nicking people's Facebook passwords without their permission, cyber security experts report.

The malicious apps were downloaded more than 2.3million times and posed as step counters, wallpaper apps, mobile games and more.

2

They were removed by Google from the Play Store after the search giant was alerted to the issue by researchers at French tech firm Evina.

In a report seen by this week, Evina security gurus detailed how they routed out 25 nasty apps posing as legitimate downloads on the Play Store.

While they looked like normal apps, they were secretly stealing people's Facebook usernames and passwords.

Researchers said that once downloaded, the apps would overlay the Facebook app with a fake login page.

2

Users would then unwittingly plug in their username and password believing they were logging into Facebook.

However, the apps stole those credentials and then sent them to a remote server.

It's not clear what the cyber crooks planned to do with the credentials.

Usernames and passwords can easily be sold to hackers looking to break into people's other online accounts.

That's because many people use the same username and password for Facebook as they do other accounts, such as their email or Instagram.

Evina researchers said they reported the 25 malicious apps to Google at the end of May.

Google swiftly removed them from the Play Store after independently verifying the software was up to no good.

The apps posed as image editors, video editors, step counters, flashlight applications, file managers, wallpaper apps and mobile games.

How to change your Facebook password

If you believe you were affected by one of the apps, it's best you change your Facebook password right away.

1. Click the down arrow in the top-right corner of any Facebook page and select Settings.
2. Click Security and login.
3. Click Edit next to Change password.
4. Click Save Changes.

To reset your password if you're not logged in to Facebook:

1. Go to the .
2. Type the email address, mobile phone number, full name or username associated with your account, then click Search.
3. Follow the on-screen instructions

Most read in Phones & Gadgets

GONE DOWN

Major banking app went down leaving thousands of customers unable to access money

BLUE PETER ROMP

Huge BBC star, 37, reveals she got caught having sex in Blue Peter garden

KATE'S TRIBUTE

Touching moment Kate gets emotional during standing ovation for WW2 heroes

TRIPPIER TO THE PUB

Trippier enjoys night out with group of party girls amid marriage woes

In other news, hackers recently tricked Google Alerts into sending malware-ridden links to users.

Here are three Google settings you need to activate now to stop hackers.

READ MORE SUN STORIES

TREE DEATH

'Much-loved' dad killed by tree branch as council fined over 'avoidable' death

COUNTING DOWN

Major supermarket slashes price of Cadbury advent calendar to just £1

And, a tech blogger has revealed the possible design for next year's iPhone 12.

Have you had any cyber security problems recently? Let us know in the comments...

We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at [email protected]