"Hey Siri" support and possibly wireless charging case alongside AirPower charging mat.
Malicious App 'InstaAgent' Sends Instagram Passwords to Unknown Server, Posts Spam in Users' Feeds
InstaAgent, an app that connects to Instagram and promises to track the people that have visited a user's Instagram account, appears to be storing the usernames and passwords of Instagram users, sending them to a suspicious remote server.
An app developer from Peppersoft downloaded InstaAgent -- full name "Who Viewed Your Profile - InstaAgent" -- and discovered it's reading Instagram account usernames and passwords, sending them via clear text to a remote server - instagram.zunamedia.com.
InstaAgent is also using the credentials to log into accounts and post unauthorized images. Instagram does not permit third-party apps to upload photos to user accounts.
While InstaAgent isn't particularly popular in the United States, it is currently the number one free app in both the United Kingdom and Canada, with thousands of downloads that puts a huge number of Instagram users at risk of having their information stolen. In the Google Play store, the app had between 100k and 500k users, and the install numbers could be similar for iOS.
Google has removed the InstaAgent Android app from the Google Play store, but InstaAgent is still available in the iOS App Store for the time being. Anyone who has downloaded InstaAgent should delete the app immediately and change their Instagram password.
There are dozens if not hundreds of third-party apps that promise to provide Instagram users with followers and other perks, and these kind of apps should be avoided. According to Instagram, these apps are "likely an attempt to use your account in an inappropriate way" as InstaAgent does.
Update 3:20 p.m. Pacific Time: InstaAgent has now been removed from the iOS App Store.
An app developer from Peppersoft downloaded InstaAgent -- full name "Who Viewed Your Profile - InstaAgent" -- and discovered it's reading Instagram account usernames and passwords, sending them via clear text to a remote server - instagram.zunamedia.com.
InstaAgent is also using the credentials to log into accounts and post unauthorized images. Instagram does not permit third-party apps to upload photos to user accounts.
While InstaAgent isn't particularly popular in the United States, it is currently the number one free app in both the United Kingdom and Canada, with thousands of downloads that puts a huge number of Instagram users at risk of having their information stolen. In the Google Play store, the app had between 100k and 500k users, and the install numbers could be similar for iOS.
Google has removed the InstaAgent Android app from the Google Play store, but InstaAgent is still available in the iOS App Store for the time being. Anyone who has downloaded InstaAgent should delete the app immediately and change their Instagram password.
I would say "Who Viewed Your Profile - InstaAgent" is the first malware in the iOS Appstore that is downloaded half a million times.
— David L-R (@PeppersoftDev) November 10, 2015There are dozens if not hundreds of third-party apps that promise to provide Instagram users with followers and other perks, and these kind of apps should be avoided. According to Instagram, these apps are "likely an attempt to use your account in an inappropriate way" as InstaAgent does.
Update 3:20 p.m. Pacific Time: InstaAgent has now been removed from the iOS App Store.
Tags: Instagram, InstaAgent
[ 98 comments ]
Top Rated Comments
(View all)
42 months ago
We are getting lots of fake apps into the AppStore while lots of good apps are rejected because some silly thing that no one cares.
42 months ago
While it's easy to victim blame people who have been caught out by this, it highlights a big issue with the curated App Store model: many people implicitly trust that any app that Apple has allowed onto the store will not be malicious and they will therefore do stupid things (such as providing their login details)
This is a massive breach of trust by Apple and they need to take the review process a hell of a lot more seriously than they appear to be doing
It's also ironic that Google have already killed this on their store, but it's still there on the iOS store!
This is a massive breach of trust by Apple and they need to take the review process a hell of a lot more seriously than they appear to be doing
It's also ironic that Google have already killed this on their store, but it's still there on the iOS store!
42 months ago
slipped it past the monitors eh? sounds like they need some better app approvers
42 months ago
How on earth did Apple approve this? Goodness. Wonder if they also posted the Facebook privacy message on their news feed, and sent money to recover their long-lost uncle in Africa.
Seems like the appropriate time for Apple to use the "kill switch" on iOS Apps and shut this thing down.
Seems like the appropriate time for Apple to use the "kill switch" on iOS Apps and shut this thing down.
42 months ago
After they remove this crap, they should remove instagram while they at it.
Why? What's wrong with Instagram? They should remove SnapChat and Yik Yak.
Why? What's wrong with Snapchat and Yik Yak? They should remove Grindr and Facebook.
42 months ago
While it's easy to victim blame people who have been caught out by this, it highlights a big issue with the curated App Store model: many people implicitly trust that any app that Apple has allowed onto the store will not be malicious and they will therefore do stupid things (such as providing their login details)
This is a massive breach of trust by Apple and they need to take the review process a hell of a lot more seriously than they appear to be doing
It's also ironic that Google have already killed this on their store, but it's still there on the iOS store!
I agree. I'm not a developer but just an average user with some common sense. While I wouldn't download an app like this, I think most trust that if it's on the app store, it at least won't steal your personal information. I mean, even Apple says not to download anything outside of the app store. That almost implies if it is in the app store, it should be trusted.
42 months ago
Why? What's wrong with Instagram? They should remove SnapChat and Yik Yak.
Why? What's wrong with Snapchat and Yik Yak? They should remove Grindr and Facebook.
Why? What's wrong with Grindr and Facebook? They should remove Kik and Tapatalk.
Why? What's wrong with Kik and Tapatalk? They should remove Path and Pinterest.[ Read All Comments ]
Amazon and Best Buy today kicked off new discounts for the 2017 10.5-inch iPad Pro, which include a new low price for the 64GB version at $499.99, down from $649.99. You can find every iPad...
California-based company Lexani Motorcars today unveiled its latest vehicle conversion, the 2019 Cadillac Escalade Viceroy Edition.
The hyper-luxury vehicle is equipped with a wide variety of...
Like it did last year, Apple in February will host an internal activity challenge for its employees around the world, tasking them with closing all three Apple Watch Activity rings every day for the...
Spotify will soon launch a "don't play this artist" feature in its iOS app, which will allow subscribers to block an entire artist from playing across the app (via The Verge). This means...
Apple today announced that its Everyone Can Create curriculum is now available in German, French, Spanish, and Italian on Apple Books. The free creative guides will also be available in Swedish and...
Google is currently rolling out support for road speed limits and speed traps in its navigation app, Google Maps.
When drivers are using the app, the speed limit feature shows the speed limit of...
When an over-the-air iOS update starts downloading on your iPhone or iPad, you can monitor its progress in the Settings app via General -> Software Update.
The lack of a cancel option on...
Apple doesn't have an official method for individually locking sensitive apps like Photos with a passcode, but luckily there's a workaround that was introduced in iOS 12 with Screen Time.
...
