[rwth-security] Facebook, Twitter profiles slurped by mobile apps using malicious SDKs