Insta-Agent, an app that purported to show users who viewed their Instagram profiles, secretly sent passwords to developers and posted images without permission. Having been downloaded over half a million times, the app was hugely popular with Instagram users.
The app was downloaded between 100,000 and 500,000 times in the UK on Android, making it top of the free download charts in both the UK and Canada. Users who logged in to the app had their credentials uploaded, unencrypted, to a 3rd party server. The app also posted images advertising itself to user profiles – contravening Instagram’s terms of service.
SOURCE: The Guardian
View the full story here