Malware in popular Android app steals your Facebook credentials - Delete it now

Imagine downloading a fun photo-editing app in hopes of turning yourself into a cartoon. Instead, the app doesn’t even work — and to add insult to injury, it steals your Facebook credentials. This isn’t imaginary: It’s based on a true story of about 100,000 people who recently downloaded a malicious app.

You don’t have to gamble on random, suspicious apps to edit your face and have fun. You can rely on a trustworthy brand like Adobe and download Photoshop Express for free photo editing fun. Tap or click here for five new features in Photoshop Express you haven’t heard about.

Despite its cute and playful theme, Craftsart Cartoon Photo Tools contained dangerous Android trojan malware called Facestealer. If you’re one of the thousands of people who fell for this app, your phone could be infected. Here’s all you need to know about this threat and how to protect yourself.

Luckily, Google pulled it from the app store on Monday

It’s all thanks to a French mobile security team called Pradeo. Cybersecurity researchers blew the whistle on Pradeo’s blog. On Monday, researchers pointed out that the app stole users’ Facebook credentials through social engineering schemes.

Craftsart would tell victims they couldn’t edit photos without first logging into Facebook. Victims would then enter their Facebook username and password into what they thought was the official site. In reality, they were using a dupe that sent their credentials to a criminal server with ties to Russia.

Around 100,000 people downloaded the malware-infested Craftsart Cartoon Photo Tools app. Here's why you should delete it ASAP.
Here’s what the app looked like before Google pulled it. | Photo credit to Pradeo.com

That’s right: Craftsart Cartoon Photo Tools connected to a domain Pradeo says is registered in Russia. This domain has been linked to many malicious mobile apps throughout the years. This is especially troubling considering President Biden warned the country about Russian cyberattacks on Monday.

“The more Putin’s back is against the wall, the greater the severity of the tactics he may employ,” President Biden said. “One of the tools he’s most likely to use in my view, in our view, is cyberattacks.”

RELATED: How to prepare for Russia’s impending cyberattacks on America

What you can do

After Pradeo alerted Google Play, the malicious app disappeared. Luckily, no one else can fall for its tricks now. But if you downloaded it in the past, you might be hearing some alarm bells in the back of your head.

Continue reading

How the BBC is getting real news into Russia is fascinating

In most parts of the world, you can turn on any news network to get a glimpse of the devastation from Russia’s continued invasion of neighboring Ukraine. If you live in Russia, that’s not the case.

Russian citizens get their information only from state-run news outlets, which paints a very different picture from what’s actually happening. Vladimir Putin is hiding details of his military’s brutality in Ukraine from his people. Tap or click here to spot fake Russian social media accounts and posts.

Continue reading

Three top crypto bosses are dead. Coincidence?

Open/download audio

Is someone killing Putin’s friends? There’s a common thread: They’re all crypto billionaires. In this one-minute episode, let’s look over this real-life Agatha Christe murder mystery.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Not now, Putin, I’m busy: North Korean soldiers deployed in Russia are taking full advantage of unrestricted internet access by … binge-watching p*rn. The internet isn’t available to most citizens in North Korea, so this is the first time the soldiers can see all the web has to offer.

Ukraine invasion: Are these 5 rumors true or false?

In times of crisis, you can expect to see misinformation circulating. Now that Russia invaded Ukraine, social media is flooded with misleading news, like doctored images and inaccurate reports. Tap or click here for six clever ways to spot fake news stories and scams.

Continue reading

🪆 They need to be Putin place: A network of undersea fiber-optic internet cables could be Russia’s next target. If disabled, the West (the USA, Canada, Mexico and Australia, to name a few) could go dark — everything from Wi-Fi to calls to financial transactions. Russia’s also interfering with GPS systems, causing chaos for commercial airlines. Why? Retaliation against countries that support Ukraine.

Scam alert: Beware of COVID vaccine emails - they're all fake

Open/download audio

Russia’s Vladimir Putin announced yesterday that they’ve developed a COVID-19 vaccine — and that it works so well that even his own daughter has taken it. This only adds to the frenzy of scam emails being received by millions of Americans promising a vaccine. Here’s what’s going on.

Learn more about your ad choices. Visit megaphone.fm/adchoices