InstaAgent was a third-party app that would let you see who was viewing your Instagram profile while skimming your password. App seems to have been sending usernames and passwords in cleartext to an unknown server. App was then posting spam and third party images to users’ feeds. App has been pulled from the App Store now, but youd be well advised to go change your password on Instagram right the hell now. It’s the number one app in its category in the UK and Canada, and also decently popular in the US and Europe.”]
Source: https://gizmodo.com/apple-pulls-sketchy-password-stealing-instagram-app-fro-1741855590