Cybersecurity researchers from Zimperium recently discovered 37 Android apps that were distributing infostealing malware dubbed 'Schoolyard Bully'.When victims try to run them on their endpoints (opens in new tab), they’ll get a legitimate Facebook login popup, but malicious JavaScript code runs in the background to extract whatever the user inputs.So far, the researchers haven’t been able to ascertain the threat actor behind the campaign, but they do know that it has been ongoing for at least four years.They can use the platform to distribute more dangerous malware (opens in new tab) to a large audience, and push fake narratives by commenting and sharing news.And since people reuse passwords across different services, they can try and access other accounts belonging to their victims too."