Thursday, February 27, 2025
HomeFACEBOOKFacebook Suspended More Than 10,000 Apps That Associated with 400 Developers for...

Facebook Suspended More Than 10,000 Apps That Associated with 400 Developers for Abusing FB Privacy

Published on

SIEM as a Service

Follow Us on Google News

Facebook announced that they suspended “tens of thousands” of apps associated with 400 developers due to the privacy concern, and pose a threat to the Facebook community.

After the Cambridge Analytica scandal that affected 87 Million Facebook Users, Facebook continuously focusing more and deploy the in-depth investigation to figure out the vulnerable apps.

Facebook started the investigation based on the accessibility permission that requested by the apps from Facebook users, which means “how many users they had and how much data they could access “

Later Facebook starts identifying the apps that abuse the privacy policy based on the signals associated with an app’s potential and perform the in-depth examination.

To date, the investigation has applied with millions of apps and suspended more than 10k apps for a variety of reason, and the app developers team employed by Facebook continuing their investigation.

Not All suspended App Posing threats

Facebook suspended many apps not just because of abusing the user’s privacy but many of the app that opt-in the facebook API not live, and so many test apps are never get rolled out.

“We have clarified that we can suspend or revoke a developer’s access to any API that it has not used in the past 90 days”, Facebook said.

Also, many of the app developers are not responding to a Facebook request which causes them to suspended according to Facebook’s commitment to take action.

According to Ime Archibong, VP of Product Partnerships at Facebook ” In a few cases, we have banned apps completely. That can happen for any number of reasons including inappropriately sharing data obtained from us, making data publicly available without protecting people’s identity or something else that was in clear violation of our policies.  “

In the same case, an App called myPersonality banned in last year shared the information about 3 Million Facebook Users Highly Sensitive Data with researchers and companies.

“Also, Facebook filed a lawsuit against Rankwave, a South Korean data analytics company that failed to cooperate with Facebook investigation an LionMobi and JediMobi, two companies that used their apps to infect users’ phones with malware in a profit-generating scheme.”

Likewise, To improve users privacy, Facebook continually working to set up a strong foundation by removing several APIs, and carefully review every active app whether its access to more than basic user information.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates

 

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

GitLab Vulnerabilities Allow Attackers to Bypass Security and Run Arbitrary Scripts

GitLab has urgently released security updates to address multiple high-severity vulnerabilities in its platform...

LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has...

Cisco Nexus Switch Vulnerability Allows Attackers to Cause DoS

Cisco Systems has disclosed a high-severity vulnerability (CVE-2025-20111) in its Nexus 3000 and 9000...

Silver Fox APT Hackers Target Healthcare Services to Steal Sensitive Data

A sophisticated cyber campaign orchestrated by the Chinese Advanced Persistent Threat (APT) group, Silver...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Massive Facebook Phishing Attack Targets Hundreds of Companies for Credential Theft

A newly discovered phishing campaign targeting Facebook users has been identified by researchers at...

New Facebook Fake Copyright Notices to Steal Your FB Accounts

A newly discovered phishing campaign is using fake Facebook copyright infringement notices to trick...

PriveShield – Advanced Privacy Protection with Browser Profile Isolation

A browser extension named PRIVESHIELD automatically creates isolated profiles to group websites based on...