The malware works by waiting for the user to launch an application created by Facebook. Then it quickly opens a new browser tab with a fake Facebook login page and displays it at the top of the originally launched application. The users then enter their Facebook credentials and the malware copies them and sends them to the dedicated server.
Of course, tech-savvy users will recognize this and will not fall for this trick, but children or the elderly who are using an Android phone for the first time will easily get overpopulated.
For this reason, you should check whether an app mentioned in the overview is installed on your smartphone. If so, you should uninstall them immediately. And, of course, give your Facebook account new login details.