The apps all used an unusual tactic of loading a legitimate Facebook page as part of the data theft.
Source: Threadpost