Malicious App 'InstaAgent' Sends Instagram Passwords to Unknown Server, Posts Spam in Users' Feeds


[​img]


instaagent, app connects instagram , promises track people have visited user's instagram account, appears storing usernames , passwords of instagram users, sending them suspicious remote server.

app developer peppersoft downloaded instaagent -- full name "who viewed profile - instaagent" -- , discovered it's reading instagram account usernames , passwords, sending them via clear text remote server - instagram.zunamedia.com.

[​img]​

instaagent using credentials log accounts , post unauthorized images. instagram not permit third-party apps upload photos user accounts.

[​img]​

while instaagent isn't particularly popular in united states, number 1 free app in both united kingdom , canada, thousands of downloads puts huge number of instagram users @ risk of having information stolen. in google play store, app had between 100k , 500k users, , install numbers similar ios.

[​img]​

google has removed instaagent android app google play store, instaagent still available in ios app store time being. has downloaded instaagent should delete app , change instagram password.

passwords other sites , accounts same instagram password should changed precaution. highly recommend password management app 1password, can generate unique complex passwords each , every site or service. instagram advises against installing third-party apps don't follow community guidelines.

there dozens if not hundreds of third-party apps promise provide instagram users followers , other perks, , these kind of apps should avoided. according instagram, these apps "likely attempt use account in inappropriate way" instaagent does.

update 3:20 p.m. pacific time: instaagent has been removed ios app store.

article link: malicious app 'instaagent' sends instagram passwords unknown server, posts spam in users' feeds
 

kill fire!!!!!!!!
 


Forums News and Article Discussion MacRumors.com News Discussion


  • iPhone
  • Mac OS & System Software
  • iPad
  • Apple Watch
  • Notebooks
  • iTunes
  • Apple ID
  • iCloud
  • Desktop Computers
  • Apple Music
  • Professional Applications
  • iPod
  • iWork
  • Apple TV
  • iLife
  • Wireless

Comments

Post a Comment

Popular posts from this blog

Sean Penn, "Chapo Guzman", and Rolling Stone

if you've spare twenty minutes or (and inclination) take @ sean penn's rambling account of meeting (then) fugitive mexican drug lord "chapo" guzman. its interesting on number of levels. not quality of sean penn's journalistic work. first observation had there remarkably little actual interviewing going on. penn's limited spanish ("hola" , "adios") played part. guzman made number of statements, claiming turned narcotics because there no other means of earning living. beyond that, nothing groundbreaking. sean penn himself of polarizing figure. guy rose fame jeff spicoli fancies himself of outlaw journalist, without writing chops of hunter s. thompson. prose of intelligent man; stylist ambitions out of reach of abilities. uses word "brume" describe aftereffects of bout of flatulence. pretentious word (i presume) not technically accurate. mentions twice expensive wristwatches sported guzman's sons -
Read more

Subler - What is "Fix Audio Fallbacks"?

when remove commercials recorded tv before encoding, encounter 2 second audio lag after cut. tried subler's fix audio fallbacks in case for. didn't wanted. do?   it hint atv, nothing content editing: https://bitbucket.org/galad87/subler/issues/146/add-audio-track-fallback-to-batch-options   Forums Apple TV Apple TV and Home Theater iPhone Mac OS & System Software iPad Apple Watch Notebooks iTunes Apple ID iCloud Desktop Computers Apple Music Professional Applications iPod iWork Apple TV iLife Wireless
Read more

Help please Strange logs

#4 i'm not sure ask, or go...is normal keychain storage logs? com.apple.iadidrecords apple persistent state encryption call history user data key com.apple.ids: devicehbi ids: identity-rsa-private-key itunes iad password safari extensions list safari webcrypto master key didn't create of these. normal?   me again... also, apparently certified apple employee? certificate id , everything. can log in apple certification registry keychain storage password , have account id?????? may hub? apple using. not losing it. don't think @ least.   Forums Macs macOS macOS iPhone Mac OS & System Software iPad Apple Watch Notebooks iTunes Apple ID iCloud Desktop Computers Apple Music Professional Ap
Read more