Analyst: Malicious Virus SparkKitty Detected Stealing Wallet Mnemonics, Primarily Targeting Users in China and Southeast Asia

Odaily Planet Daily reported that cybersecurity company Kaspersky has discovered a new type of malware called SparkKitty. This virus infects applications on iOS and Android devices to steal all images from users’ photo albums, aiming to find screenshots of crypto wallet mnemonic phrases. Kaspersky analysts noted that these malicious apps are mainly cryptocurrency-themed, including a crypto information tracking app called "币 coin" on the App Store and a messaging app with "cryptocurrency trading features" called SOEX on Google Play, which has been downloaded over 10,000 times. Researchers believe SparkKitty originates from the same source as the SparkCat malware discovered in January this year, as both share similar characteristics. The malware has been active since at least early 2024, primarily targeting users in Southeast Asia and China, though it is technically capable of attacking users in any region. Kaspersky has notified Google, and the related apps have been removed from app stores. (Cointelegraph)