Social media Facebook credentials stolen by new malware posing as ‘stress-relieving’ painting program