Free Android app steals your private access data

It happened again. A widely downloaded free Android app from the Google Play Store is loaded with malware that tricks you into entering your secret credentials to hijack them. If you have installed the following Android app, you should remove it immediately and change your login details.

Free Android app steals your login details

Although Google tries to check the apps in the Play Store so that they do not load infected or malicious applications there, the attackers always manage to include free apps malware to enter the store. So also in this case. is the android app “Craftsart’s Cartoon Photo Tools. You upload your photo to the app and get a cartoon style image in return. It sounds great, and it is. That’s why the app was downloaded more than 100,000 times. This is now becoming a problem (source: computer bleeding).

In fact, the Android app is viz infected with the FaceStealer Trojan, which at some point asks you to enter your personal data to access Facebook. These are then sent to attackers and can be misused. Google probably already removed the app because we couldn’t find it anymore.

Important: If you still have “Craftsart Cartoon Photo Tools” installed on your smartphone, you must absolutely remove the app. To be safe, you should also change your password on Facebook and activate two-factor authentication. If you have also used the Facebook login data, i.e. email address and password, elsewhere, you must change them immediately.

In the video we explain what malware really is:

Essential Tips for Free Android Apps

If you download a free Android app from the Google Play Store, you must always pay attention to application behavior. Do the required permissions match the app? Photo editing software doesn’t need access to your contacts or phone features. Does the application ask me for credentials that do not belong to the application itself? If this happens, remove the app immediately. Do I need to install another file or app through the app? This is also dangerous, because it bypasses Google’s security mechanisms.. So also delete.

If you don’t just agree to everything a free Android app asks of you and also read what permissions are granted, you’re on the safe side.