FlyTrap Android Malware Compromises Thousands of Facebook Accounts

FlyTrap is an active Android Trojan campaign (since March 2021) that uses social engineering and malicious apps—distributed via Google Play and third-party stores—to hijack Facebook sessions by injecting JavaScript into WebViews and exfiltrating cookies, tokens, location, and other account data; Zimperium identifies over 10,000 victims across 144 countries, publishes package names, file hashes, and C2 infrastructure, and warns that exposed C2 databases increase risk of large-scale account takeover and abuse.