SparkKitty Malware Steals Photos,Crypto on Android,iOS Apps

Security researchers have identified a new malware called SparkKitty that has infiltrated both the Apple App Store and Google Play Store, targeting Android and iOS users by stealing all photos from infected devices. Believed to be an evolution of the earlier SparkCat malware, SparkKitty indiscriminately collects all images, including cryptocurrency wallet recovery phrases often stored as screenshots, posing a significant risk for crypto theft and potential misuse of private images. The malware has been active since at least February 2024 and was found in apps such as SOEX and modded TikTok clones, which have since been removed from official stores. While the primary focus is on cryptocurrency theft, the broad photo access raises concerns about possible extortion or other malicious uses, although no evidence of blackmail has yet emerged. Additionally, a separate critical Android vulnerability involving hidden Unicode characters in notifications has been discovered, allowing attackers to disguise malicious links and trigger malware downloads or phishing attacks, further highlighting the increasing security risks faced by smartphone users. Experts advise caution with app downloads and suspicious links, emphasizing the need for vigilance and updated device-level protections.