InstaAgent is Password-Collecting Malware

via John Gruber. [ MacRumors ] Juli Clover:

An app developer from Peppersoft downloaded InstaAgent — full name “Who Viewed Your Profile – InstaAgent” — and discovered it’s reading Instagram account usernames and passwords, sending them via clear text to a remote server – instagram.zunamedia.com.

Don’t install InstaAgent. If you did, uninstall InstaAgent, and as soon as possible change your Instagram account password. Avoid third-party Instagram apps that promise followers and likes. Good work David L-R (the app developer from Peppersoft)!