Google has rejected nine Android apps after researchers said the apps used a cunning way to steal users’ Facebook credentials.

Some apps have been downloaded millions of times and include PIP Photo, Processing Photo, Rubbish Cleaner, Inwell Fitness, Horoscope Daily, App Lock Keep, Lockit Master, Horoscope Pi and App Lock Manager.

According to a Google spokesperson, all nine apps have been removed, but the company has also banned the developers behind the nine apps from the store, meaning they are not allowed to submit new apps.

For more information, read the original story in Arstechnica.