Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the user's authentication information via a malicious application created by the third party.
https://play.google.com/store/apps/details?id=jp.co.fablic.fril&hl=en
https://apps.apple.com/jp/app/furimaapuri-furiru-fril-fasshon/id523497998