Stress Relief App Infects Facebook Users With Malware

guest · May 31, 2018

Stress Relief App Infects Facebook Users With Malware
May 30, 2018
https://threatvector.cylance.com/en...-app-infects-facebook-users-with-malware.html

‘Relieve Stress Paint’ isn’t an app that’s embedded in Facebook though. Rather, cyberattack targets received links to download the malicious application through Facebook messages or email.

The hyperlink for the ‘Relieve Stress Paint’ download webpage reads ‘aol.net’ in Unicode characters, which the web browser resolves to ‘xn—80a2a18a.net’ in Punycode. Very clever!

Targets who download and install ‘Relieve Stress Paint’ do indeed get an application that can be used for painting with a UI and features quite similar to Microsoft Paint. What they didn’t know is that in the background, ‘Relieve Stress Paint’ exploits the target’s Facebook account used on the machine in order to acquire sensitive Facebook session cookies, login credentials, and other sensitive Facebook data.

While ‘Relieve Stress Paint’ is installed on a Windows machine, ‘DX.exe’ remains persistent on the system, and ‘uplink.dll’ is likely the malicious dynamic link library which grabs the target’s sensitive Facebook data.
‘Relieve Stress Paint’ exploits Chrome on Windows. The malware makes copies of the login data and cookie databases that it finds and then stores them [...]
Click to expand...

Log in or Sign up

Stress Relief App Infects Facebook Users With Malware

guest Guest

Log in or Sign up

Stress Relief App Infects Facebook Users With Malware

guest Guest

Useful Searches