Android users who have downloaded the popular photography app Instagram have been warned of the dangers associated with using unapproved sources.
IT security and data protection company Sophos has detected malware which has been distributed on a Russian website purporting to be an official Instagram site.
Cybercriminals have played on the popularity of the app - which has millions of users around the world, and was recently acquired by Facebook for a staggering $1 billion.
Once installed, the fake version of the app will send background SMS messages to premium rate services earning its creators revenue.
Sophos warned users to be careful when "downloading applications from sites, especially when they're not official Android markets."
Fiona Donnellan