A third-party app for Instagram that helps users track visitors to their feeds seems to be doing more than that as an iOS developer found that it was stealing people’s logins and passwords. Apple and Google have pulled InstaAgent from their app stores and we’re encouraging you to delete the app if you have it.
David Layer-Reiss, a developer for Peppersoft, found the app has been storing your login details and sending these as plain text to another server. It even uses credentials to log into accounts and post unauthorized images. App creator Turker Bayram apologized for the incident but denies they aren’t saving login information. The app has been the number one free app in both Canada and the United Kingdom recently, according to MacRumors.
Source: Cult of Mac