{"id":15609,"date":"2026-01-10T20:11:09","date_gmt":"2026-01-10T20:11:09","guid":{"rendered":"https:\/\/fastestvpn.com\/resources\/?p=15609"},"modified":"2026-04-22T10:47:28","modified_gmt":"2026-04-22T10:47:28","slug":"flytrap-trojan-malware-hacks-into-thousands-of-facebook-accounts","status":"publish","type":"post","link":"https:\/\/fastestvpn.com\/resources\/flytrap-trojan-malware-hacks-into-thousands-of-facebook-accounts\/","title":{"rendered":"FlyTrap Trojan Malware Hacks Into Thousands of Facebook Accounts","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

An Android Malware FlyTrap is making rounds on the Google Play Store and preying on unsuspecting victims. It\u2019s not uncommon to hear about malicious apps. But alarming still, the malware has been infecting users since March 2021.<\/span><\/p>\n

\"FlyTrap<\/p>\n

Malware<\/span> comes in different forms and can be distributed in several ways. One of the most common ways is through apps or websites that claim to offer something very exciting like freebies. Such apps and websites serve as a honeypot for attracting users to infect them with malware.\u00a0<\/span>
\n

\n Get FastestVPN <\/i><\/a>\n <\/div>\n<\/p>\n

What is the FlyTrap Trojan Malware?<\/h2>\n

Research conducted by Zimperium<\/span> has unearthed the existence of malware that has been making rounds on the Google Play Store for many months now. Zimperium\u2019s zLabs research team has coined the Android malware \u201cFlyTrap\u201d.<\/span><\/p>\n

FlyTrap is a Trojan that is distributed through several malicious applications that lure victims by claiming to offer free Netflix coupon codes, Google Adwords coupons codes, and such. Basically, hackers develop avenues that are likely to catch the attention of the average user. After all, who doesn\u2019t love a free Netflix subscription or gift cards for online shopping?\u00a0<\/span><\/p>\n

The Android malware has been noted to originate from Vietnam and has thus far claimed a shocking 10,000+ users located in 144 countries worldwide. According to the report, the malware has been operating since March 2021. It speaks about the strength and success of social engineering techniques in spreading malware at such a rapid speed.\u00a0<\/span><\/p>\n

What is a Trojan?<\/h3>\n

A Trojan is a program that appears to be legitimate but actually hides harmful code underneath. It could be a program like Skype downloaded from a third-party source on the internet. But instead of installing Skype on your device, the program installs malware when executed. It could also be bundled the malware with the program and installed in the background to avoid detection.\u00a0<\/span><\/p>\n

Social engineering techniques like Phishing are a common way that attackers use to trick you into downloading Trojan. Because a Trojan is simply a malicious program that appears to be safe, it can bypass the safety filters of consciousness.\u00a0<\/span><\/p>\n

How Does FlyTrap Malware Works?<\/h2>\n

Although Google has taken the reported applications off the Play Store, they are still available on third-party sources on the internet. Not only that, more applications acting as Trojan may emerge in the future. Hence you need to learn how the FlyTrap malware works and how to prevent it from affecting you.<\/span><\/p>\n

\"Zimperium<\/p>\n

(Image credits: Zimperium)<\/span><\/i><\/p>\n

FlyTrap works by stealing your Facebook information like Facebook ID, email address, IP address, location, and cookies and tokens used by your Facebook account. The app promises to deliver free codes to you after you follow a few steps. Once you reach the WebView page that directs you to log in to your Facebook account, the malicious JavaScript will come into action and steals the information as mentioned above, especially <\/span>cookies<\/span>.\u00a0<\/span><\/p>\n

Websites and applications use cookies to identify you. It contains small information about you, like device and IP address, to maintain persistence in the web and app experience. Session cookies (or Tokens) are generated when you log in to your account so that the following requests do not require validation.\u00a0<\/span><\/p>\n

An attacker can impersonate you and gain unfettered access to your Facebook account by stealing the session cookies. The attacker can use this opportunity to spread <\/span>Phishing <\/span>links to your friends and family. As the messages will come from you, the Phishing attempt is more likely to succeed.\u00a0<\/span><\/p>\n

The exfiltrated information is sent to a Command & Control (C&C) server. It basically refers to the mothership through which malware can receive commands remotely, such as updating itself to prevent detection.\u00a0<\/span><\/p>\n

How to Prevent FlyTrap Malware Attack<\/h3>\n