Apple and Google removed around twenty apps from their app stores after security researchers discovered they were carrying data-stealing malware for nearly a year.
The malware, known as SparkCat, targeted cryptocurrency wallets by searching for recovery phrases in image galleries using optical character recognition (OCR).
The apps had over 242,000 downloads collectively from the Google Play Store, and researchers found the malware in an Indonesian and UAE food delivery app initially.
While the malicious apps have been removed from official app stores, there is a possibility that the malware may still be available on other websites and unofficial app stores.