A New Malware on iPhone and Android Can Quietly Steal Your Crypto
SparkKitty, a dangerous malware targeting mobile crypto wallets, secretly scans photos for seed phrases. Kaspersky warns users to protect sensitive data and avoid risky apps.
SparkKitty, a dangerous new malware, is targeting mobile devices to compromise crypto wallets. It searches through users’ image data to uncover and steal seed phrases.
In recent cases, the malware infected phones through compromised apps, with several bait programs catering to lure crypto users. Thankfully, app store moderation has removed many of SparkKitty’s attack vectors.
How SparkKitty Targets Crypto Wallet Apps
Popular security firm Kaspersky identified this new malware today after months of observation across different mobile operating systems.
Earlier in February, the firm discovered SparkCat, an earlier iteration of this malware. After the previous discovery, the malicious developers repackaged this trojan through new apps.
Our researchers uncovered #SparkKitty, a stealthy Trojan targeting both #iOS and #Android devices.It captures images and device data from infected phones and transmits them to the attackers. The Trojan was embedded in apps related to #crypto, gambling, and even a trojanized… pic.twitter.com/2CjjSwcpeo
— Kaspersky (@kaspersky) June 24, 2025
According to the company’s full report, this piece of malware is specifically focused on targeting crypto users, especially in China and Southeast Asia.
Hackers embedded SparkKitty into crypto-related apps, like price trackers and messengers with crypto-buying functionality. One such compromised messenger, SOEX, was downloaded over 10,000 times before removal.
SparkKitty’s operators also branched out to include casino apps, adult sites, and fake TikTok clones. Even if a user downloaded a contaminated app, the malware wouldn’t automatically start looking for crypto.
Instead, the app would ostensibly function normally, asking for access to users’ photos. It would continue appearing normal even after gaining this permission.
In other words, this malware would repeatedly scan image data for signs of a crypto seed phrase, double-checking the compromised device periodically.
Kaspersky’s researchers have several reasons to believe that SparkKitty is an upgraded SparkCat. For example, they share several debug symbols, code construction, and even a few compromised vector apps.
However, SparkKitty is more ambitious than SparkCat. The earlier malware would focus on penetrating crypto security, while the upgraded version can compromise many types of sensitive data.
— SlowMist (@SlowMist_Team) June 24, 2025
SlowMist TI Alert
Delivered via:
"币coin" (App Store)
Nonetheless, SparkKitty’s main priority is still in uncovering seed phrases.
Overall, the best caution for users is never to store seed phrases digitally. Don’t even take a photo of it.
There’s no shortage of recent scams and malware that can compromise this password, thereby allowing attackers to steal all your crypto. It’s important not to give sketchy apps access to your devices, but it’s doubly vital to protect your seed phrase.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Australian Dollar breaks 0.69 as hot US CPI raises 50-bp Fed hike risk
Philadelphia Fed President Paulson supports gradual rate hikes but warns inflation is still “stuck ” above target
Core inflation is "stuck" in the 2.5%-3% range, with triple pressures from tariffs, energy, and AI data center demand. Paulson insists on gradual rate hikes while setting clear trigger conditions—if inflation expectations shift upwards or wage pressures build, he will move more quickly. Meanwhile, Governor Waller stated that if October's core CPI rises 0.3% month-on-month, a 50 basis point rate hike in December should be considered. Dallas Fed's Logan said at least two more rate hikes are needed.
During Anthropic IPO roadshow, OpenAI also discloses financial data: Q3 revenue falls short, losses far exceed expectations
OpenAI's revenue in Q3 reached $10 billion, marking a nearly 50% quarter-on-quarter increase. Its annualized run rate is approximately $50 billion, but operating losses have expanded from $10.1 billion to $10.9 billion. Competitor Anthropic has begun its IPO roadshow, with Q3 revenue of $17 billion and losses of only $567 million, leading in both scale and profitability.
Petrobras (PBR.US) Achieves Record Oil and Gas Production in Q3; Adjusted Net Profit Up 78% Year-on-Year, Raises Full-Year Production and Capital Expenditure Guidance
Petrobras released its Q3 2026 financial results after the US market close on November 10.
Crypto prices
More
