Instagram profile tracking app harvests your usernames and passwords
Just because an app has passed iTunes’ verification procedure doesn’t automatically mean it’s safe. Take this Instagram client called “Who Viewed Your Profile — InstaAgent” for example, which was available on both iTunes and Google Play until an iOS developer found out that it harvests usernames and passwords. It’s not very popular in the US, so we wouldn’t be surprised if you haven’t heard of it, but in a nutshell, it’s an app that monitors your Instagram profile views. Peppersoft developer David L-R took a close look at the app and revealed on Twitter that it’s been sending log-in credentials (unencrypted and in cleartext, to boot) to remote server instagram.zunamedia.com. Despite that address, it’s in no way connected to Instagram itself.
Via: Apple Insider
Source: David L-R (Twitter)
AIVAnet 