📌 Security researchers have discovered a new attack campaign called “SparkCat” that targets crypto users. This malware hides in apps on Google Play and the App Store, stealing crypto wallet recovery phrases!

🛑 Malware “SparkCat” – A New Danger for Crypto Users

A new report from Kaspersky shows that the #SparkCat campaign has been silently collecting user data since March 2023. Initially, the malicious apps were only targeting Android and Windows, but by late 2024, they had appeared on iOS and mainstream app stores like Google Play & App Store.

📌 How SparkCat works:
🔹 Malware hiding in messaging apps and other popular apps.
🔹 When the user grants photo access, the software will scan the images in the phone to find the wallet recovery phrase (mnemonic phrase).
🔹 Once it detects sensitive data, it encrypts it and sends it to a remote server.

💀 One of the apps found to be infected with malware is the food delivery app “ComeCome” on Google Play, with more than 242,000 downloads.

🚨 Why Is This a Big Risk?

📌 Most app stores only do automatic checks, with very few manual reviews. This makes it easy for hackers to bypass the review process by hiding malicious code in updates after the app has been approved.

🔍 SparkCat uses #Google 's OCR (optical character recognition) technology to automatically scan images on the device. When the user opens some support features in the application (such as support chat), the application will request photo access and start scanning data.

📢 Experts warn:
✅ This is a very sophisticated attack method, similar to the way criminals steal PIN codes in ATM scams.
✅ If this tool is widely distributed,#Hacker can be easily replicated and attacked on a larger scale.
✅ AI combined with OCR can help hackers scan and steal data faster and more accurately.

🛡 How to Protect Your Crypto Wallet?

🔴 Don't grant photo access unless necessary. Be cautious with apps that ask for photo access without a clear reason.
🔴 Do not store the seed phrase as an image. Write it down or use a more secure method.
🔴 Check the app carefully before downloading. Even the App Store or Google Play can contain malicious apps.
🔴 Use a hardware wallet. This is the safest way to protect your crypto assets.

🔥 The More Crypto Grows, The More Sophisticated Hackers Get!

Attacks like SparkCat show that hackers are getting more creative and dangerous. Users need to be more vigilant and protect their crypto assets intelligently.

📌 Please share this information so more people know and avoid becoming victims! 🚨