Beware of a painting application called ‘Relieve Stress Paint’ that hackers are using to download malware dubbed “Stresspaint” and steal Facebook user credentials/cookies.
The attackers have allegedly infected over 40,000 users and infections have grown rapidly, according to the Radware threat researchers who discovered the threat.
The victim targets appear to be Facebook page owners and pages that contain stored payment methods.
Radware also said that Amazon may be the next group’s target.
The attack vector appears to come from phishing emails or directly on Facebook itself. Users who click the link appear to be directed to a legitimate “AOL.net” link, but are sent instead to a fake site where the malicious app is made available to download.