Bullish
SparkKitty Malware Scans Photos to Steal Crypto Seed Phrases
2026-07-27 19:34:11
SparkKitty malware infiltrates mobile apps across iOS and Android, using OCR to scan photo albums for wallet seed phrases and passwords, uploading stolen data to remote servers.
Woofun AI reports that the SparkKitty malware family has been embedded within applications on the Apple App Store, Google Play, and third-party Android markets. Disguised as crypto services, chat tools, or entertainment apps, the malware requests photo album access to continuously scan existing and new images using optical character recognition. It extracts cryptocurrency wallet seed phrases, passwords, QR codes, and device information, transmitting this data to remote servers.
WOOFUN AI
Impact Assessment · Quick Read
This incident highlights the evolving threat landscape where malware targets user-generated content like photos rather than just input fields. The use of OCR to harvest seed phrases from screenshots poses a significant risk to users who store sensitive recovery information in accessible media. Security protocols must now account for image-based data leakage, urging users to avoid storing seed phrases in photo libraries.
Generated by WOOFUN AI · For reference only, not investment advice
Comments
No comments yet.