Android phone and tablet users are being warned about 25 apps which cab secretly steal your Facebook password.
The apps have been removed from the Google Play store but have already been downloaded more than two million times.
That means in order to secure your phone yo will need to delete the app - and you should change your Facebook login details.
The apps pose as everything from wallpaper providers and step counters to flashlights and video editors.
A new report by Evina, seen by ZDNet, has issued a warning.
ZDNet said: “The apps posed as step counters, image editors, video editors, wallpaper apps, flashlight applications, file managers, and mobile games.”
According to Evina, code hidden in the apps can detect which pages you’ve recently opened.
If this is Facebook, the app can overlay a web browser window on top of the official Facebook app and load a fake Facebook login page.
If you’re fooled by the fake page and enter your credentials, the app can log your data and send it to a remote server.
25 dangerous apps
Super Wallpapers Flashlight
Padenatef
Wallpaper Level
Contour Level Wallpaper
iPlayer & iWallpaper
Video Maker
Color Wallpapers
Pedometer
Powerful Flashlight
Super Bright Flashlight
Super Flashlight
Solitaire Game
Accurate Scanning of QR Code
Classic Card Game
Junk File Cleaning
Synthetic Z
File Manager
Composite Z
Screenshot Capture
Daily Horoscope Wallpapers
Wuxia Reader
Plus Weather
Anime Live Wallpaper
iHealth Step Counter
com.tqyapp.fiction
