logo

SparkKitty Malware Steals Crypto Wallet Seed Phrases From iOS and Android Photos

ID: 4e15ebff-71e2-5078-930c-892adefb4097

STIX ID: report--4e15ebff-71e2-5078-930c-892adefb4097

Feed Name: cybersecurityNews.com

Threat Score
75/100

Date Published: 2026-07-27

Date Updated: 2026-07-27

Author: Tushar Subhra Dutta

...
...

SparkKitty is a mobile OCR-based stealer targeting iOS and Android users that scans photo galleries for crypto wallet seed phrases and other sensitive text, exfiltrating findings to attacker-controlled servers; it has been distributed via trojanized apps on official marketplaces and third-party stores, includes numerous IoCs (file hashes, domains, URLs, IPs), and poses a high-risk threat to individuals holding digital assets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.