Meta warns of password-stealing phone apps

Meta warned a million Facebook users Friday that they have been "exposed" to seemingly innocuous smartphone applications designed to steal passwords to the social network.

So far this year, Meta has identified more than 400 "malicious" apps tailored for smartphones powered by Apple or Android software and available at the Apple and Google app stores, director of threat disruption David Agranovich said during a briefing.

"These apps were listed on the Google Play Store and Apple's App Store and disguised as photo editors, games, VPN services, business apps and other utilities to trick people into downloading them," Meta said in a blog post.

The apps often ask people to login with their Facebook account information to use promised features, stealing usernames and passwords if entered, according to Meta's security team.

"They are just trying to trick people into entering their login information in a way that enables hackers to access their accounts," Agranovich said of the apps.

"We will notify one million users that they may have been exposed to these applications; that is not to say they have been compromised."

More than 40 per cent of the apps Meta listed involved ways to edit...