• SparkKitty malware targets crypto wallets by scanning users’ image data for seed phrases, posing a significant risk to mobile devices.
• Compromised apps, such as crypto price trackers and messengers, spread SparkKitty, with one app reaching over 10,000 downloads before removal.
• Kaspersky warns against storing seed phrases digitally, as malware like SparkKitty and similar threats can steal sensitive data, including crypto passwords.

SparkKitty, a dangerous new malware, is targeting mobile devices to compromise crypto wallets. It searches through users’ image data to uncover and steal seed phrases.

In recent cases, the malware infected phones through compromised apps, with several bait programs catering to lure crypto users. Thankfully, app store moderation has removed many of SparkKitty’s attack vectors.

How SparkKitty Targets Crypto Wallet Apps

Popular security firm Kaspersky identified this new malware today after months of observation across different mobile operating systems.

Earlier in February, the firm discovered SparkCat, an earlier iteration of this malware. After the previous discovery, the malicious developers repackaged this trojan through new apps.

According to the company’s full report, this piece of malware is specifically focused on targeting crypto users, especially in China and Southeast Asia.

Hackers embedded SparkKitty into crypto-related apps, like price trackers and messengers with crypto-buying functionality. One such compromised messenger, SOEX, was downloaded over 10,000 times before removal.

SparkKitty’s operators also branched out to include casino apps, adult sites, and fake TikTok clones. Even if a user downloaded a contaminated app, the malware wouldn’t automatically start looking for crypto.

Get to know Godleak

Godleak crypto signal is a  service which provide profitable crypto and forex signals for trading. Godleak tried to provide you signals of best crypto vip channels in the world.

It means that you don’t need to buy individual crypto signal vip channels that have expensive prices. We bought all for you and provide you the signals with bot on telegram without even a second of delay.

Godleak crypto leak service have multiple advantages in comparision with other services:

•  Providing signal of +160 best crypto vip channels in the world
• Using high tech bot to forward signals
• Without even a second of delay
• Joining in +160 separated channels on telegram
• 1 month, 3 months , 6 months and yearly plans
• Also we have trial to test our services before you pay for anything

For joining Godleak and get more information about us only need to follow godleak bot on telegram and can have access to our free vip channels. click on link bellow and press start button to see all features

Join for Free

☟☟☟☟☟

https://t.me/Godleakbot

Also you can check the list of available vip signal channels in the bot. by pressing Channels button.

Instead, the app would ostensibly function normally, asking for access to users’ photos. It would continue appearing normal even after gaining this permission.

In other words, this malware would repeatedly scan image data for signs of a crypto seed phrase, double-checking the compromised device periodically.

Kaspersky’s researchers have several reasons to believe that SparkKitty is an upgraded SparkCat. For example, they share several debug symbols, code construction, and even a few compromised vector apps.

However, SparkKitty is more ambitious than SparkCat. The earlier malware would focus on penetrating crypto security, while the upgraded version can compromise many types of sensitive data.

Nonetheless, SparkKitty’s main priority is still in uncovering seed phrases.

Overall, the best caution for users is never to store seed phrases digitally. Don’t even take a photo of it.

There’s no shortage of recent scams and malware that can compromise this password, thereby allowing attackers to steal all your crypto. It’s important not to give sketchy apps access to your devices, but it’s doubly vital to protect your seed phrase.