TNW picked up the Sophos report.
Sophos says the fake Instagram app is available on a few websites, including one based in Russia.
The app pretends to be a fully-functional version of Instagram, but doesn't always connect to the photo-sharing service's network.
The best way to protect yourself from accidentally downloading the fake Instagram app is to only use the official Google Play market on your phone.
This is the second fake big-name malicious app in two weeks. Last week Sophos discovered a fake version of Angry Birds Space that could access personal information on your phone.
Don't Miss: The Top 10 Reasons To Choose Android Over iPhone
More From Business Insider