SparkKitty malware targets crypto wallet users

• SparkKitty malware has been found in mobile apps targeting cryptocurrency wallet users.
• Researchers said the malware steals images that may contain wallet recovery phrases.
• The campaign highlights growing security risks for mobile cryptocurrency users.

SparkKitty malware has been found in mobile apps that target cryptocurrency users by stealing images stored on infected devices.

Security researchers said the malware searches photo galleries for images that may contain cryptocurrency wallet recovery phrases and other sensitive information.

The researchers said SparkKitty appears to target users in Asia through malicious apps distributed outside official app stores.

The malware can upload stolen images to remote servers, allowing attackers to search for wallet seed phrases and private information.

The researchers said the campaign shows attackers are increasingly targeting mobile devices to steal cryptocurrency rather than exploiting blockchain networks.

SparkKitty follows earlier mobile malware campaigns that used fake cryptocurrency apps and phishing attacks to target digital asset users.

The researchers advised users to avoid storing wallet recovery phrases as photos and to download apps only from trusted sources.