Security Architecture, Application security, Endpoint/Device Security, Endpoint/Device Security, Security Strategy, Plan, Budget, Incident Response, TDR, Threat Management, Threat Management, Malware, Endpoint/Device Security, Endpoint/Device Security, Endpoint/Device Security

Version of Facebook Lite app weighed down by Spy FakePlay mobile malware

March 7, 2017

By Bradley Barth

A version of the social media mobile app Facebook Lite, most likely available via third-party sites in China, was found infected with malware that can steal personal information, Malwarebytes reported on Monday.

The app, which is a low-bandwidth version of Facebook designed to work more optimally with low-end phones and poor wireless connections, contains malware that was detected as Android/Trojan.Spy.FakePlay, according a Malwarebytes blog post. To perform its malicious activity, the malware uses the malicious receiver "com.google.update.LaunchReceiver" and service "com.google.update.GetInst", both of which are deceivingly named to look related to Google Update.

Aside from stealing information, Spy FakePlay also installs additional malicious apps, the blog post continues. Noting that the infected version of Facebook Lite contains Chinese characters in its code, Malwarebytes recommended in its report that mobile device owners download Facebook Lite only from the official Google Play store.

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.