Storyline
SparkKitty malware targets crypto wallet seed phrases via mobile apps
The SparkKitty malware has been discovered infiltrating Apple's App Store and Google Play, hidden within mobile apps on iPhones and Android devices. It scans photos on infected devices to locate cryptocurrency wallet recovery seed phrases, posing a significant security threat to crypto users.
Published 2026-07-27 11:30 UTCUpdated 2026-07-27 20:10 UTC
Current brief openSource links open
This current storyline is open here with summary, metadata, source links, continuity context, and full evidence. Paid is for compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.2 top sources shown
limited source diversity in top sources
Overview
The SparkKitty malware has been discovered infiltrating Apple's App Store and Google Play, hidden within mobile apps on iPhones and Android devices. It scans photos on infected devices to locate cryptocurrency wallet recovery seed phrases, posing a significant security threat to crypto users.
Score total
1.35
Momentum 24h
3
Posts
3
Origins
2
Source types
2
Duplicate ratio
33%
Why now
- SparkKitty malware was recently discovered in major app stores, affecting both iOS and Android devices.
- The malware’s photo-scanning technique is a novel and stealthy method to extract sensitive crypto data.
- Prompt awareness can mitigate risks before widespread exploitation occurs.
Why it matters
- Seed phrases are crucial for wallet access; their theft can lead to irreversible loss of crypto assets.
- Mobile apps remain a vulnerable vector for malware targeting crypto users.
- Awareness can help users avoid apps that may compromise wallet security.
Continuity snapshot
- Trend status: insufficient_history.
- Continuity stage: emerging_confirmed.
- Current status: open.
- 3 current source-linked posts are attached to this storyline.
All evidence
All evidence
Decrypt - SparkKitty malware found in app stores targeting crypto wallet seed phrases
decrypt.co · decrypt.co · 2026-07-27 20:09 UTC
SparkKitty malware hidden in mobile apps scans photos for crypto wallet seed phrases
the_block_crypto · theblock.co · 2026-07-27 11:30 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
- decrypt.co (1)
- the_block_crypto (1)
Top origin domains (this list)
- decrypt.co (1)
- theblock.co (1)