Popular Instagram Client ‘InstaAgent’ Is Password-Collecting Malware

Juli Clover, writing for MacRumors:

An app developer from Peppersoft downloaded InstaAgent — full name “Who Viewed Your Profile - InstaAgent” — and discovered that it reading Instagram account usernames and passwords, sending them via clear text to a remote server - instagram.zunamedia.com. […]

While InstaAgent isn’t particularly popular in the United States, it is currently the number one free app in both the United Kingdom and Canada, with thousands of downloads that puts a huge number of Instagram users at risk of having their information stolen. In the Google Play store, the app had between 100k and 500k users, and the install numbers could be similar for iOS.

Hats off to “David L-R”, who uncovered this.

★ Tuesday, 10 November 2015