WARNING: Agile Messenger spys your ICQ password

[belinea]

I have captured the network traffic of "Agile Messenger" today and I have find out that Agile spys your ICQ password.

On every start your ICQ number and your password were sent to Agile in PLAINTEXT.

http://billing.am-im.net/oscar/login.php?USERID=<your ICQ number>&PWD=<your ICQ password>&SEQ=<????>&SERVICE=1&i=<your customer id>&imei=&ver=<version of Agile Messenger>&uid=WMPPC

[AlanJC]

I'm under the impression it does the same with all accounts you set-up not just ICQ.

[Aikon]

I did warn about this, time ago:
http://forum.xda-developers.com/showthread.php?t=282464

This is why I did uninstall Agile from my PDA.

[CJBS]

Whoah! And it's sent by accessing a URL, so it might be logged along the way (proxy etc.)!

[j3d1n4s7y]

Originally Posted by AlanJC I'm under the impression it does the same with all accounts you set-up not just ICQ.

can anyone confirm this?

[lukeap69]

It is also my suspicion that it was when I used Agile Messenger on my smartphone that my first YAhoo account was hacked. I cannot use it now since my password wouldn't be accepted. Thus, I have created another account which is a bit of pain because I have been using my previous email address for some time. MAybe, this thread just confirmed it!

AP