SparkKitty malware spreads through app stores to steal photos in search of Wallet mnemonic phrase.

[Chain News] PANews, June 24 - According to reports, cybersecurity company Kaspersky has issued a warning about a new type of malware called SparkKitty, which steals photos from infected devices in an attempt to find cryptocurrency wallet mnemonic phrases. The software infiltrates certain apps in the Apple and Google app stores, targeting iOS and Android devices, and indiscriminately steals all images from the photo album once infected. Kaspersky stated that while it is suspected that the primary target of the attackers is screenshots of mnemonic phrases, the stolen images may contain other sensitive data.

Affected applications include "coin" on the App Store and the SOEX messaging app, which has over ten thousand downloads on Google Play. After being notified by Kaspersky, Google has removed and banned the developer. A Google spokesperson stated that Android users are automatically protected by Google Play Protect. Additionally, SparkKitty has also spread through casino applications, adult games, and malicious TikTok clone apps, similar to SparkCat discovered in January this year, possibly from the same source. This attack primarily targets users in Southeast Asia and China, but technically it can attack users in other regions.