A new malware called SparkCat is targeting iPhone and Android users, stealing cryptocurrency wallet recovery phrases. These recovery phrases, often stored in photos, are essential for regaining access to your crypto wallet. If hackers get their hands on them, they can easily steal your funds.
So far, more than 240,000 people have fallen victim to this malware, which hides within apps on the Google Play Store and Apple App Store.
SparkCat’s primary function is to steal recovery phrases from cryptocurrency wallets. These phrases are commonly saved in photos or screenshots on your phone. Once hackers get access to these phrases, they can control your wallet and take your funds.
Android Devices: On Android, SparkCat uses a tool named Spark. It regularly updates itself from a hidden online source, ensuring it remains effective and persistent.
iOS Devices: On iOS, SparkCat goes by different names, such as Gzip or stat. It communicates with hackers’ servers, sending stolen recovery phrases.
The malware’s main goal is to scan photos on your phone for cryptocurrency wallet recovery phrases. SparkCat uses Google ML Kit, which can read text from photos in several languages, including English, Korean, Chinese, and Japanese. Once it finds a recovery phrase, it sends the data directly to hackers.
SparkCat is also designed to target specific regions. For example, in Europe, it may look for recovery phrases in European languages, while in Asia, it may focus on languages like Korean or Chinese. This makes SparkCat especially dangerous because it can adapt to various regions, increasing its effectiveness.
To stay safe from SparkCat and similar threats, consider these essential tips:
- Stick to Trusted Apps: Only download apps from well-known stores, such as Google Play or the Apple App Store.
- Use Two-Factor Authentication (2FA): Add an extra layer of security to your cryptocurrency accounts.
- Update Your Device: Ensure your phone and apps are always up to date to prevent vulnerabilities.
- Monitor Your Wallet: Regularly check your cryptocurrency accounts for unusual activity.
SparkCat is a significant threat to both iPhone and Android users. By targeting cryptocurrency wallet recovery phrases, it can steal funds and compromise your accounts. Be cautious about the apps you download, and take the necessary steps to secure your wallet.
