Malware Scans Users' Pictures for Crypto Wallet Recovery Phrases on Google and Apple App Stores, Warns Kaspersky Labs

Malware called SparkCat is scanning users' images on Google Play Store and Apple App Store to find recovery phrases for crypto wallets, according to cybersecurity firm Kaspersky Labs. Once the malware infects a device, it uses optical character recognition (OCR) to search for specific keywords in different languages. The malware can steal not only recovery phrases but also other personal data from the gallery, such as messages or passwords that could remain on screenshots. Kaspersky recommends not storing sensitive information in screenshots or a phone's picture gallery and instead using a password manager, as well as removing any suspect or infected apps.