StressPaint: If any of you have used a Facebook painting app that is advertised as a tool for stress relief, you are at risk, as it is malware that steals login information and payment information if it exists on the account.
'StressPaint' first appeared a few days ago and has so far infected over 45,000 Facebook users. The attacks seem to be specifically aimed at users who use Facebook pages and have set up a payment method on their account.
It was discovered by security firm Radware. This malware appears to be spreading very quickly around the world with very high infection rates, and appears, according to researchers, to have been "professionally developed".
StressPaint steals the victim's account information by copying the content of Chrome browser cookies and login date files. Once the stored Facebook credentials are detected, they are sent to a server designated by the malicious creators.
With the stolen credentials, additional information is collected from the compromised account, such as the number of friends, whether the account manages a page or not, or whether a payment method is set up.
We believe that the malware process is active on the system for less than a minute in certain cases, which helps the malware remain undetectable.
Currently, the attacks appear to be collecting data, but researchers say that the stolen information could be used in a variety of ways, including selling credentials on underground forums, blackmailing victims, spying, profiting from stolen payment information, and many other, not-so-pleasant, ways.
