The app was still available on the Google Play Store as of this writing, and appeared to be popular with over 500,000 downloads since its April debut.

Its presence online might be short-lived. Instagram was clear that Ghosty “violates our terms,” and planned “further enforcement” against the developer on top of the cease and desist warning. The question, of course, is how the app has remained on Google Play without either Instagram or Google taking notice. There’s a real danger that creeps might use this to harass or threaten people who think their accounts are safe, and several months of access is enough to do some serious damage.