How to get someone's IP from Kik messenger?
I was on the Kik messenger app, and someone in a group chat posted screenshots of his modded Kik app that contains an "IP grabber". He said he could hack people easily, and was very fast to tell me my own IP address. He was able to tell when anyone in the chatroom was lurking (i.e watching the chat without typing), for how long, their last activity, etc. I have no idea how, but he was able to know my IP address along with 2 other people in the chatroom. Prior to this, he had sent me a picture which I downloaded a week ago. He has not sent me any links, and I have certainly not clicked on any links from him. We had a few messages back and forth, but that's it. He said that he would hack me, so I logged out a few hours later. I used AVG antivirus and Kaspersky to scan my phone, and there were no issues detected. I manually checked my downloaded apps on Android, and there wasn't any downloaded app that was new. I have since then logged out of Kik, but I am concerned: could he be spying on my phone, and what can I do to prevent this?
You asked how to get someone's IP from kik -
A modified version of Kik messenger could be able to pose a security threat to other users, however there could be limitations though. For example, on a normal Kik messenger you cannot style your messages by customising your own messages with HTML or javascript (we are referring at the user level). A modified version of Kik messenger can do anything, and could send anything. Thus the JavaScript could contain malicious code. The only limiting factor on the possibility of a recipient getting this malicious message, is if the Kik messenger servers are designed to detect and prevent such types of malicious messages reaching the recipient/target. Another example of how a modified version of Kik messenger could be able to pose a security threat, is if it can bypass any upload file type restrictions. Some social media sites/apps have stopped or made some limitations on some types of file formats that can be uploaded or sent. This is because some file formats can be executable files that could contain malicious software that a non-tech savvy user may not realise.