Kaspersky warns about malware that steals cryptocurrency seed phrases on mobile devices

Kaspersky's security researchers have discovered a mobile malware campaign called SparkKitty, targeting cryptocurrency users through infected apps on iOS and Android. SparkKitty uses optical character recognition technology to steal screenshots containing seed phrases from cryptocurrency wallets. This malware spreads through official app stores and unofficial sources, aiming to scan all images on the device to collect sensitive information.

This campaign has been active since February 2024, utilizing various distribution mechanisms for each platform. Kaspersky warns that the compromise of enterprise certificates allows malware applications to install without App Store approval, posing a high risk to cryptocurrency users.