⚠️ SparkKitty malware hidden in mobile apps scans photos for crypto wallet seed phrases
SparkKitty, a cross-platform malware family targeting cryptocurrency users, has been distributed through Apple's App Store, Google Play and third-party Android app stores, according to Check Point.
SparkKitty spreads through trojanized applications masquerading as cryptocurrency services, messaging platforms and entertainment apps, scanning photo libraries for sensitive data like seed phrases, passwords, and QR codes before sending it to attacker-controlled servers.
❗️The report recommends avoiding screenshots of wallet recovery phrases, restricting photo library permissions to applications that require them, downloading software only from trusted sources, and reviewing application permissions regularly. It also advises storing recovery phrases offline, not in photo galleries.
@QSIMedia
SparkKitty, a cross-platform malware family targeting cryptocurrency users, has been distributed through Apple's App Store, Google Play and third-party Android app stores, according to Check Point.
SparkKitty spreads through trojanized applications masquerading as cryptocurrency services, messaging platforms and entertainment apps, scanning photo libraries for sensitive data like seed phrases, passwords, and QR codes before sending it to attacker-controlled servers.
❗️The report recommends avoiding screenshots of wallet recovery phrases, restricting photo library permissions to applications that require them, downloading software only from trusted sources, and reviewing application permissions regularly. It also advises storing recovery phrases offline, not in photo galleries.
@QSIMedia