An app that claimed it could track who views specific Instagram accounts has been found to be harvesting thousands of users’ data and posting images without permission.
InstaAgent claimed that it could tell users exactly who had seen their posts, a feature which Instagram does not support. The app is a third-party tool and in no way associated with the Facebook–owned service.
However, an eagle–eyed developer has found that the app, which was available on both the App Store and Google Play, was actually stealing user names and passwords and sending them unencrypted to a remote server.
The details were then used to post spam on affected accounts. It’s believed InstaAgent has been downloaded more than half a million times.
If you’ve used the application, it'd be smart to change your password immediately. The app no longer appears to be available on either Apple or Google’s stores, but its very existence adds to growing concern about the security of mobile apps.
Was this article helpful?