logo

Screenshot-Reading Malware

ID: 44ca909e-d1b2-5bab-ac8c-4abbe0d3fc56

STIX ID: report--44ca909e-d1b2-5bab-ac8c-4abbe0d3fc56

Feed Name: Schneier on Security

Threat Score
72/100

Date Published: 2025-02-07

Date Updated: 2026-04-19

Author: Bruce Schneier

...
...

Kaspersky researchers identified smartphone malware that uses optical character recognition (OCR) to search users' photo libraries for screenshots of crypto wallet recovery phrases; infected apps have been distributed via Google Play (reported >242,000 downloads) and — reportedly for the first time — the Apple App Store, representing a new spyware/infostealer vector targeting cryptocurrency users.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.