SparkKitty is a new cross-platform image stealer targeting smartphones, aiming to steal photos from victims' devices through malicious apps and suspicious links.
The malware was found in the App Store and Google Play, embedded in apps like a cryptocurrency tracker and messaging app with crypto-exchange features.
In Google Play, a messaging app was infected, while in the App Store, the malware was detected in the 币coin app.
Attackers spread SparkKitty through suspicious links, including a TikTok mod for Android, leading users to a page resembling the App Store for fake app downloads.
The malware targeted users in Southeast Asia and China but poses a threat globally, potentially stealing sensitive information like crypto wallet seed phrases.
Protecting against SparkKitty involves securing your smartphone's gallery and using tools like Kaspersky Password Manager to safeguard sensitive photos.
Checking devices for infected apps and utilizing security solutions like Kaspersky for Android and iOS can help prevent data theft by SparkKitty.
Stay informed about emerging cyberthreats and ensure photo security by following updates on Kaspersky's Telegram channel and using secure storage methods.
Kaspersky recommends using their password manager to store and protect valuable photos and sensitive information across devices.
By being vigilant about app sources and utilizing security tools, users can defend against the evolving tactics of malware like SparkKitty.