Attention, Bitcoin, Ether, Solana, XRP Phone Wallet Users: This Trojan Is Trying to Drain Your Money
Saving your wallet information and seed phrases as photos on your mobile device? This Trojan may pose a threat to you.
The successor to the SparkCat malware is distributed through official app stores, extracting photos from galleries using OCR to find original phrases.
Shaurya Malwa | Edited by Parikshit Mishra Updated Jun 24, 2025 11:59 AM Published Jun 24, 2025 11:46 AM
Key points:
- A new mobile spyware program called SparkKitty has infiltrated official app stores and targets photos of seed phrases and wallet credentials.
- SparkKitty, the successor to SparkCat, uses modified frameworks and libraries to extract sensitive information from iOS and Android devices.
- Although the app has been removed from stores, malicious activity may continue through third-party downloads and clones, posing a global threat.
A new type of mobile spyware called SparkKitty has appeared on Apple's App Store and Google Play, masquerading as modified cryptocurrency apps to covertly extract images of seed phrases and wallet credentials.
The malware appears to be the successor to SparkCat, a campaign first identified in early 2025 that used fake helper modules to covertly access users' galleries and steal sensitive images.
