{ "id": "219de493-43c8-4feb-a401-0799b92847ca", "created_at": "2026-04-06T00:16:52.37422Z", "updated_at": "2026-04-10T13:12:32.08425Z", "deleted_at": null, "sha1_hash": "91296cad15b09426d10fb8f7261783289245d3e3", "title": "FlyTrap Android Malware Is Taking Over Facebook Accounts — Protect Yourself With a Malware Scanner", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 40313, "plain_text": "FlyTrap Android Malware Is Taking Over Facebook Accounts —\r\nProtect Yourself With a Malware Scanner\r\nPublished: 2021-08-17 · Archived: 2026-04-05 21:27:50 UTC\r\nZimperium, one of the global leaders in mobile device security, recently revealed its discovery of a new Android\r\nTrojan malware that has already spread to over 10,000 victims across at least 140 countries.\r\nThe malware, codenamed FlyTrap, employs social engineering tactics to compromise Facebook accounts. It\r\ntargets Android users and is capable of stealing their Facebook IDs, location information, email addresses, IP\r\naddresses, and the cookies and tokens associated with their Facebook accounts.\r\nHow does FlyTrap spread?\r\nThe malware was initially distributed through apps available on the Google Play store and other third-party app\r\nstores. Since the malware campaign was discovered, the infected apps have been removed from the Google Play\r\nstore, but they are still available on third-party repositories. \r\nHow does FlyTrap work?\r\nFlyTrap employs clever social engineering tactics, money-saving propositions, and sleek app design to dupe its\r\nvictims. The cybercriminals, currently thought to be based in Vietnam, have released several seemingly unrelated\r\napps, all designed with the same end goal — to steal people’s Facebook data.\r\nOne of the apps works by leading people to believe they can claim a Netflix coupon. \r\nAs with all FlyTrap apps, users are eventually asked to log in to their Facebook account. Once the user has done\r\nso, the malware is free to hijack their account. \r\nAnother of the malicious apps allows people to vote on which soccer player they think is the best.\r\nWith the malware campaign still ongoing, it is unclear whether additional, potentially more sophisticated apps will\r\nbe released.\r\nHow to protect yourself from FlyTrap\r\nThere’s no doubt that the apps are convincing in their design, and with them originally being available for\r\ndownload through the Google Play store, it’s easy to see how over 10,000 people fell victim. With the\r\ncybercriminals showing no signs of slowing down, the best defense is a trusted antivirus app offering complete\r\nprotection for your mobile device.\r\nWith its online malware scanner, Trend Micro Mobile Security detects and protects against every known strain of\r\nthe FlyTrap malware. If you’re looking for the most robust protection against FlyTrap, as well as other mobile\r\nhttps://news.trendmicro.com/2021/08/17/flytrap-android-malware-is-taking-over-facebook-accounts-protect-yourself-with-a-malware-scanner/\r\nPage 1 of 2\n\nsecurity threats, Trend Micro™ Mobile Security is the perfect solution.\r\nTrend Micro Mobile Security lets you stay safe no matter where you go or what you do. Here are some of the\r\nfeatures it offers: (available for both Android and iOS!)\r\nSurf anywhere: Prevent mobile apps from loading dangerous and risky websites when you browse.\r\nStop threats: Cloud-based Smart Protection Network™ and Mobile App Reputation technology stops\r\nthreats before they can reach you.\r\nImprove performance: Take advantage of optimization features to make your mobile devices work better.\r\nLooking to secure all your devices?\r\nTrend Micro Maximum Security offers powerful protection for up to 5 devices. By choosing Trend Micro\r\nMaximum Security, you can protect your Android device from FlyTrap, and secure your other Windows, Mac,\r\niOS, and Chromebook devices, too. Click on the buttons below to download:\r\nSource: https://news.trendmicro.com/2021/08/17/flytrap-android-malware-is-taking-over-facebook-accounts-protect-yourself-with-a-malware-scanner/\r\nhttps://news.trendmicro.com/2021/08/17/flytrap-android-malware-is-taking-over-facebook-accounts-protect-yourself-with-a-malware-scanner/\r\nPage 2 of 2", "extraction_quality": 1, "language": "EN", "sources": [ "MITRE" ], "origins": [ "web" ], "references": [ "https://news.trendmicro.com/2021/08/17/flytrap-android-malware-is-taking-over-facebook-accounts-protect-yourself-with-a-malware-scanner/" ], "report_names": [ "flytrap-android-malware-is-taking-over-facebook-accounts-protect-yourself-with-a-malware-scanner" ], "threat_actors": [ { "id": "aa73cd6a-868c-4ae4-a5b2-7cb2c5ad1e9d", "created_at": "2022-10-25T16:07:24.139848Z", "updated_at": "2026-04-10T02:00:04.878798Z", "deleted_at": null, "main_name": "Safe", "aliases": [], "source_name": "ETDA:Safe", "tools": [ "DebugView", "LZ77", "OpenDoc", "SafeDisk", "TypeConfig", "UPXShell", "UsbDoc", "UsbExe" ], "source_id": "ETDA", "reports": null }, { "id": "75108fc1-7f6a-450e-b024-10284f3f62bb", "created_at": "2024-11-01T02:00:52.756877Z", "updated_at": "2026-04-10T02:00:05.273746Z", "deleted_at": null, "main_name": "Play", "aliases": null, "source_name": "MITRE:Play", "tools": [ "Nltest", "AdFind", "PsExec", "Wevtutil", "Cobalt Strike", "Playcrypt", "Mimikatz" ], "source_id": "MITRE", "reports": null } ], "ts_created_at": 1775434612, "ts_updated_at": 1775826752, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/91296cad15b09426d10fb8f7261783289245d3e3.pdf", "text": "https://archive.orkl.eu/91296cad15b09426d10fb8f7261783289245d3e3.txt", "img": "https://archive.orkl.eu/91296cad15b09426d10fb8f7261783289245d3e3.jpg" } }