SparkKitty Malware Targets Crypto Wallets on iOS and Android

Security researchers have uncovered a new threat called SparkKitty malware that specifically targets digital asset holders. This malicious software successfully bypassed safety checks to infiltrate both Apple's App Store and Google Play. Once installed on a mobile device, the malware scans through saved photos to find and extract cryptocurrency wallet recovery phrases.

Seed phrases give full access to decentralized wallets, meaning attackers can drain funds if they locate these backup images. Many users take screenshots of their recovery phrases for safekeeping, making them prime targets for this type of visual scanning attack. Security teams warn that mobile devices are becoming primary targets for digital thieves who want to bypass hardware security.

Traders and investors should immediately check their phones for unauthorized apps and ensure recovery phrases are never stored as digital photos or screenshots. Instead, physical paper backups stored in secure locations remain the safest method. Watch for updates from major app stores regarding how they plan to block similar malicious uploads in the future.