Apps with 5.8 million Google Play downloads stole users’ Facebook passwords (Ars Technica)