The security firm said when an application is launched on your phone. if it is a Facebook application malware queries the application name and, the malware will launch a browser, that loads Facebook at the same time.

“The browser is displayed at the forefront which makes you think that the application launched it. When you enter your credentials into this browser, the malware carry-out javascript to retrieve them. Then the malware sends your account information to a server,” it added.