Apple and Google remove third-party Instagram app that stole hundreds of thousands of passwords

Apple and Google have removed one of the most popular Instagram clients from their app stores after it was found to be stealing user passwords and posting photos without permission. Third-party app InstaAgent was found to be storing users’ Instagram usernames and passwords in an unencrypted form, before sending them on to unknown servers by iOS developer David L-R, who posted his discovery on Twitter late last night.

Google responded quickly to the revelation, removing the app from its Play Store, but Apple took a little longer to kill any mention of InstaAgent from the App Store, finally removing it a few hours after the first tweets indicated its malicious intentions. While Instagram warns against using third-party apps to access your…

Continue reading…

Leave a Reply

Your email address will not be published. Required fields are marked *