Malicious quiz apps were used to harvest thousands of users’ profile data, according to Facebook.