Pradeo, a computer consultant, has discovered that Craftsart Cartoon Photos Tools, a photo editing tool, includes a’spyware’ capable of stealing data from victims’ Facebook accounts.
This application, which is now available on Google Play, would have been downloaded and installed by over 100,000 people, exposing your sensitive information on the Meta-developed social network.
This program has a Trojan called Facestealer, which employs social engineering to steal Facebook keys and establishes connections to a Russian server, according to the consultant in a statement.
Once the program is downloaded, fraudsters have full access to the victims’ Facebook accounts thanks to this malware. They may contain information such as credit card details, discussions, groups, or recent searches.
The program follows in the footsteps of other comparable photo altering businesses in order to reach the general public and appear respectable.
As a result, when users log in, they are encouraged to do so using their Facebook profile, an option that is also available in services such as Meta’s own, as well as Spotify.
Once access is obtained, fraudsters seize control of the victim’s social network credentials and use them to carry out various fraudulent acts on their behalf, such as distributing fake news or sending phishing links.
Crafsart Cartoon Photo Tools links to a Russian domain that has been used occasionally in the last seven years, according to Pradeo’s checks.
Furthermore, this domain is linked to other malicious mobile apps that got into the Google Play app store by repackaging or encapsulating their code, which is often automated.
Pradeo has notified Google Play, the Android app store service, of the bug in version 1.0.1. by Craftsart Cartoon Photos Tools
This service is not presently available on Google Play, and the URL returned is “unknown,” indicating that it has been removed from the store.