Google removes 9 Android apps that were downloaded 5.8M times from Google Play, after researchers found they steal users' Facebook login credentials.
The apps included various utilities like photo editing and framing, exercise and training, horoscopes, and removal of junk files from Android devices. All of the identified apps offered users an option to disable in-app ads by logging into their Facebook accounts. The apps would then hijack the entered Facebook login credentials. The majority of the downloads were for an app called PIP Photo.
Link