Hundreds of thousands of Instagram accounts – perhaps a half million or more – have been compromised after users installed InstaAgent, an app that claimed it could track who viewed your Instagram account. “Who Viewed Your Profile – InstaAgent” malware/scamware had been downloaded a “half million times” from Apple’s App Store and downloaded between 100,000 and 500,000 times from Google’s Play Store before Apple and Google pulled the malicious app.

David Layer-Reiss

After iOS app developer David Layer-Reiss, aka “PeppersoftDev,” downloaded InstaAgent, he discovered it was reading Instagram account usernames and passwords, and then sending the unencrypted passwords to a remote server. The app was also using the credentials to hijack accounts and post unauthorized photos to Instagram profiles.

To read this article in full or to leave a comment, please click here