Multiple bugs allowed malicious Android Applications to takeover Facebook/Workplace accounts
Description
These bugs could allow malicious actors who owns Android Applications installed in the victim device alongside Facebook owned Android Applications ( Workplace, Facebook, Messenger .. ) to steal a first-party access token and use it to takeover the user Facebook/Workplace account.
Details