It doesn’t have to be so if you visit instagramforpc.org/ (not advised). The site claims, “Instagram for PC, version 1.0 is released. Our first stable release! ... Instagram is a popular app for mobile devices, we emulated the application so you can play it on your PC! Everything is exactly the same as the Instagram on your phone, you can log in with the account you use for your mobile device.”
But you get a different message from Symantec’s researchers. Instagram for PC does not deliver as promised. “This is just another vehicle for the scammers to convince users to fill out surveys, so they earn money through shady affiliate programs.” But this one is particularly tempting because the lure (Instagram on a PC) and the presentation (the entire Instagram for PC website) are both attractive.
Symantec found that the downloaded application doesn’t work. Instead the user gets an error message: missing DLL, “would you like to download the missing file(s)?” Clicking yes takes the user to a page that gives the first real clues: typical scammers’ poor grammar and typos. The page finishes with “If the download won’t unlock, Tweet, Like Google+1 ect.. [sic] then try to download again.
‘Fishy language,’ suggests Symantec. “Not only that, but the page claims that if the download ‘won’t’ work, the user should click a variety of social sharing options before trying the download again.” But if the user tries to download the missing DLL, he or she gets a survey to complete.
“The most recent version of Instagram for PC [note that the site still calls it version 1.0] now claims that in order for the application to work,” reports Symantec, “the user needs to ‘activate’ Instagram. At the bottom of the application, there’s even a warning in red text that the service is ‘not activated.’” But again, any attempt to proceed simply brings up another survey form.
Symantec notes that there is no malicious functionality (such as a keylogger or back door) contained in the software. But since the ‘app’ is downloaded directly from the developer, this could change at any time. Right now the instruction to activate the account just brings up a survey form – but if it mimicked the actual Instagram log in, it could be used to steal the users’ credentials. And therein lies the irony – an Instagram for PC simply isn’t necessary since it can already be accessed via any browser.
At the time of writing, neither Chrome nor Firefox indicated any issues with the Instagram for PC website, which is currently up and running. McAfee SiteAdvisor, however, categorizes it as a ‘malicious site.’ “http://instagramforpc.org/ : This link might be dangerous. We tested it and found security risks. Beware.”