Experts from Japanese company Trend Micro revealed the presence of Facestealer information theft Trojan in 200 applications of Google Play Store. Some of these services have been downloaded more than 100,000 times.

Facestealer was first officially mentioned in last year's Dr.Web report. It is a spyware for Android devices that steals logins and passwords of Facebook accounts.

Attackers used stolen data to compromise accounts in the social network for phishing, publication of false information and running advertising bots. According to Dr.Web, as of July 2021 the Trojan had been installed more than 1 million times.