Top Menu

InstaAgent is stealing your Instagram username and password.


InstaAgent, as the app was called, marketed itself as a program that tracked people who visited a user’s Instagram account. It had between 100,000 and 500,000 downloads from Google’s Play Store and was in the top charts of the iOS App Store. But behind the scenes, an app developer said earlier this week, the app sent users’ Instagram login credentials to a server controlled by the InstaAgent developer. Google was the first to pull the app. Apple later followed.

This suspicious packet contained the Instagram username and password and was sent to “”:

If you have used this app before, change your Instagram password and delete the app now.

Source from Ars Technica via

, , , , , ,