InstaAgent was an app for users who wanted to see who was looking at their social media content. I say was, because it now turns out that InstaAgent was actually an app that harvests social media logins and passwords for, I'm sure, no good purpose.
Given how much of a song and dance Apple makes about the security of the App Store and how it protects users from malicious app,s you have to question how this ever was allowed to find its way onto customer's iPhones.
Both Android and iOS versions were impacted. Both have been removed from their respective platform stores. If you have the app it's time to change your passwords and reflect on the myth of absolute security once more.