Apple and Google have removed around 20 apps from their app stores after discovering they contained data-stealing malware named SparkCat.
The malware has been active since March 2024 and was found in a food delivery app used in the United Arab Emirates and Indonesia.
It was later discovered on 19 other unrelated apps, which were collectively downloaded over 242,000 times through the Google Play Store.
The malware harvested personal data from victims' devices, including recovery phrases for cryptocurrency wallets and personal information from screenshots.