Android malware dubbed Schoolyard Bully Trojan has infected and extracted information from over 300,000 devices in 71 countries since 2018, the mobile security firm Zimperium zLabs reported. The apps were marketed as educational on Google Play Store and primarily targeted Facebook users in Vietnam.
The report cautions that the apps, though now removed from the Google Play Store, are still available on third-party application stores.
In addition to email addresses, phone numbers, passwords, usernames, and account IDs, the malware accessed users’ device information, like device names, RAM details, and API information.
Android Malware Infects 300,000 Facebook users