We’ve already seen a fake, malware-spreading version of Angry Birds Space for Android. Now there are reports of a fake, malware-spreading Instagram that’s also making the rounds.
The Android world rejoiced a few weeks ago when Instagram was finally made available to them, but according to the security firm Sophos, cyber criminals seized the excitement as an opportunity to distribute a cleverly disguised version of the photo-sharing app. According to the firm, the fake Instagram can send personal information from your phone back to the miscreant devs. But it seems that it shouldn’t be too hard to sniff out if you download the wrong Instagram:
In our tests, the app didn’t do a very good job of emulating the genuine Instagram app, but that may be because it failed to find the correct network operator. Because this is a malicious app that seems to be relying in the sending of background SMS messages to earn its creators revenue.
In other words, the app can read your text messages and could potentially install malware on your phone. If the newly downloaded Instagram on your Galaxy S II is acting funny, it’s probably good to ensure you’ve got the real app.
The best way to avoid the fake app is to only download Instagram from Google Play, as apps within the marketplace are subject to Google’s more stringent vetting. [Sophos via The Next Web via Business Insider]













OK, this article needs to clarify that this fake App is not available in the Play Store and it needs to do that right up front rather than saying so in the last sentence. Otherwise you are just spreading unnecessary alarm.
Gizmodo wouldn’t be Gizmodo without it’s share of sensasionalism
Agreed, but this is Gizmodo UK, it appears that the “detect crappy US crosspost” filter still needs some fine tuning. I know Kat and Sam struggle with the workload of running this site, so I am not going to be down on them. But their boss is going to get a right talking to at the next Giz bash.
Very true. And also, if you are downloading APKs from random sites it is your own responsibility to make sure they are not malware.
Not sure which part of this they didn’t understand. Pretty clear to even the most braindead people I know..
4.tinypic.com/xdaw50.png
oops..
http://i44.tinypic.com/xdaw50.png
If a malicious app is found within the Andriod play store, Google is lightning quick at taking it down, now if somebody goes and downloads in an unnoficial way, that’s not googles fault. Same could happen if you Jailbroke an iPhone/iPod/iPad
Yay sensationalist and flawed reporting.
Sometimes the internet saddens me. This is one of those times.