The French Pradeo mobile security team pointed out that the app stole users’ Facebook credentials through social engineering schemes.

Craftsart would tell victims they couldn’t edit photos without first logging into Facebook. Victims would then enter their Facebook username and password into what they thought was the official site. In reality, they were using a dupe that sent their credentials to a criminal server with ties to Russia.

More than 100,000 people downloaded the malware-infested Craftsart Cartoon Photo Tools app, although Google has pulled it now. If you want to get rid of it you should: 
- delete the infected app by going to Settings > Apps & notifications > See all apps. Tap Craftsart Cartoon Photo Tools and select Uninstall.

You should also change your Facebook password because Password1234 is not fooling anyone

What was weird was that many users gave this app one-star reviews and warned others it was a scam.