Up to 1-million Facebook users may have had their log in details stolen by malicious Android and Apple apps.
The social media company says it's reaching out to inform users who have been impacted.
Facebook’s parent company, Meta, has found more than 400 malicious apps that were designed to steal logins for the platform.
The platform says these malicious apps were disguised as games, photo editors and health services.
Meta says it has removed the apps in question and is urging people to watch out for tell-tale signs of a scam app.
Red flags include looking at the app's download count, along with ratings and reviews.
Reporting by Jess Kelly