<ul data-eligibleForWebStory="true">Kaspersky uncovered a new malware called SparkKitty that steals crypto wallets via mobile photos.The malware scans photo albums in smartphones for wallet recovery phrases.It looks for screenshots of 12- or 24-word seed phrases used to back up wallets.Once detected, SparkKitty can extract and transmit these credentials to attackers.The malware spreads by masquerading as legitimate mobile apps like '币 coin' and 'SOEX'.'币 coin' was on the Apple App Store, while 'SOEX' was on Google Play.Kaspersky notified Google and Apple, leading to the removal of the malicious apps.SparkKitty is linked to SparkCat and has been targeting users since early 2024.It mainly affects users in China and Southeast Asia but poses a global threat.Kaspersky advises crypto users not to store sensitive data in unencrypted photo albums.Users should be cautious of apps with unclear origins, even on official app stores.